General

  • Target

    7078612

  • Size

    91KB

  • Sample

    221111-j7jpnacefr

  • MD5

    2120174eaa75a9870c98a5751f8c97b6

  • SHA1

    dc089c25a8b7e0d424475aba62b529fa82628f1e

  • SHA256

    7bb09ce68b85cd829f8a5abac097d1b270d03fab0f0db93218778f7d1c5efaab

  • SHA512

    7dccae41d851f465207e46608c280c01550b2257dd72c89a17839a92028c8d981405bfa8d06bbef2727b7e46d761ef652f5a7d2512bac93112795fd42484a4dd

  • SSDEEP

    1536:s7MciKmfn5eolbsVewMRnvMEUmpqHTIMjQuVFvPRYYAG2UDhyLPuOba6Qs+8ZJQ+:81m/hsJMYmpqHkqvJYYdRh1sap0aYOwf

Malware Config

Extracted

Family

icedid

Campaign

1420621704

C2

aerbuschartint.com

Targets

    • Target

      7078612

    • Size

      91KB

    • MD5

      2120174eaa75a9870c98a5751f8c97b6

    • SHA1

      dc089c25a8b7e0d424475aba62b529fa82628f1e

    • SHA256

      7bb09ce68b85cd829f8a5abac097d1b270d03fab0f0db93218778f7d1c5efaab

    • SHA512

      7dccae41d851f465207e46608c280c01550b2257dd72c89a17839a92028c8d981405bfa8d06bbef2727b7e46d761ef652f5a7d2512bac93112795fd42484a4dd

    • SSDEEP

      1536:s7MciKmfn5eolbsVewMRnvMEUmpqHTIMjQuVFvPRYYAG2UDhyLPuOba6Qs+8ZJQ+:81m/hsJMYmpqHkqvJYYdRh1sap0aYOwf

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks