General

  • Target

    f1f61b0e96c172a24fba71806829c486b43e141493c78ec4bb895de760134316.exe

  • Size

    150KB

  • Sample

    221116-pxaxnaah54

  • MD5

    25add83261efe6a0a348b9a432060085

  • SHA1

    0db85f8e22a41852b66544261516abe5669a1006

  • SHA256

    f1f61b0e96c172a24fba71806829c486b43e141493c78ec4bb895de760134316

  • SHA512

    7692728f2a89af401a5f31f16ab0999530219f97195d4389fc44632f5a55d35b4e0567db2ec57c29324da46a8aa6c34037c8b570e3aff6043b40094d8defe122

  • SSDEEP

    1536:1a8O3V9grcCUpOignvK+BFJPJyK/Hv5OVlhLPwg0+JPZpz5wTMUpLVfBP:navEi4v5PN/P5ahLbxpz5wTMUpx

Malware Config

Extracted

Family

icedid

Campaign

3310689666

C2

trolspeaksunt.com

Targets

    • Target

      f1f61b0e96c172a24fba71806829c486b43e141493c78ec4bb895de760134316.exe

    • Size

      150KB

    • MD5

      25add83261efe6a0a348b9a432060085

    • SHA1

      0db85f8e22a41852b66544261516abe5669a1006

    • SHA256

      f1f61b0e96c172a24fba71806829c486b43e141493c78ec4bb895de760134316

    • SHA512

      7692728f2a89af401a5f31f16ab0999530219f97195d4389fc44632f5a55d35b4e0567db2ec57c29324da46a8aa6c34037c8b570e3aff6043b40094d8defe122

    • SSDEEP

      1536:1a8O3V9grcCUpOignvK+BFJPJyK/Hv5OVlhLPwg0+JPZpz5wTMUpLVfBP:navEi4v5PN/P5ahLbxpz5wTMUpx

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks