General

  • Target

    0d544614b47400768cf210c2e4d1a298e5cae36820c7b1b6327bb67b8e3ea8cb.exe.vir

  • Size

    375KB

  • Sample

    221201-jhgh1agd27

  • MD5

    433c13f7ee510b61366bf8507fa40623

  • SHA1

    c4a1608c53476053de3c7e8a9f4bb9436d62d5cd

  • SHA256

    e0567d905a3912db934c530eb1dd62856ca6cdbf318afd72d3d0fb1c183296cd

  • SHA512

    10f4adc2dd7ea79116d512a501a8a9009ffa519b4819de0e750542279dec2d8b2021ea9ebb78aed07a8e801d46979ee598725586d6b5da50abf75da29b18bfd2

  • SSDEEP

    6144:/lvrP7tlUH7tBtGop4h1ee2k6Sn4s68dTcEgDAIpiWe97TzGux0siC6pEOEGElV/:9vrPsSo9tmNhdhb

Malware Config

Extracted

Family

icedid

Campaign

1313163077

C2

oilcardirtoz.com

Targets

    • Target

      0d544614b47400768cf210c2e4d1a298e5cae36820c7b1b6327bb67b8e3ea8cb.exe.vir

    • Size

      375KB

    • MD5

      433c13f7ee510b61366bf8507fa40623

    • SHA1

      c4a1608c53476053de3c7e8a9f4bb9436d62d5cd

    • SHA256

      e0567d905a3912db934c530eb1dd62856ca6cdbf318afd72d3d0fb1c183296cd

    • SHA512

      10f4adc2dd7ea79116d512a501a8a9009ffa519b4819de0e750542279dec2d8b2021ea9ebb78aed07a8e801d46979ee598725586d6b5da50abf75da29b18bfd2

    • SSDEEP

      6144:/lvrP7tlUH7tBtGop4h1ee2k6Sn4s68dTcEgDAIpiWe97TzGux0siC6pEOEGElV/:9vrPsSo9tmNhdhb

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks