General

  • Target

    c6aafa6b32ac91908ee37207c6feb4cef74aa8e9b82e70c1e58e5691a9319c60.exe

  • Size

    735KB

  • Sample

    221121-pg6pdsdf2y

  • MD5

    066232e9a5c55c8b3c7cac91de55d747

  • SHA1

    aa52f8ce282c111335b943a7c6b8191a17f99018

  • SHA256

    c6aafa6b32ac91908ee37207c6feb4cef74aa8e9b82e70c1e58e5691a9319c60

  • SHA512

    0da3276e1735d2e5f4008d6a6e3f06238362d9cadef69d7e76e177c7a96297972eae61d2176f12ccf27d1c515461d1ee6342cc303d7564aa593e73447f9cdeb5

  • SSDEEP

    12288:7A09SCX6XZXYnXq4XC6EWpwNkQimxoQDRjL0wzU/1:009SCX6XhWvwhyQRRcwzU/1

Malware Config

Extracted

Family

icedid

Campaign

1930527392

C2

starnaddplenumsak.com

Targets

    • Target

      c6aafa6b32ac91908ee37207c6feb4cef74aa8e9b82e70c1e58e5691a9319c60.exe

    • Size

      735KB

    • MD5

      066232e9a5c55c8b3c7cac91de55d747

    • SHA1

      aa52f8ce282c111335b943a7c6b8191a17f99018

    • SHA256

      c6aafa6b32ac91908ee37207c6feb4cef74aa8e9b82e70c1e58e5691a9319c60

    • SHA512

      0da3276e1735d2e5f4008d6a6e3f06238362d9cadef69d7e76e177c7a96297972eae61d2176f12ccf27d1c515461d1ee6342cc303d7564aa593e73447f9cdeb5

    • SSDEEP

      12288:7A09SCX6XZXYnXq4XC6EWpwNkQimxoQDRjL0wzU/1:009SCX6XhWvwhyQRRcwzU/1

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks