General

  • Target

    8493559572.zip

  • Size

    113KB

  • Sample

    221201-vmhseadd9w

  • MD5

    809ffddfb7851aeb0d9d381d4d8cb789

  • SHA1

    673a943949869723c1b58ed09d897c46b65c467c

  • SHA256

    dd4b7b37b752d6fa1808976d983a92d34650b364e7a71866e3f2c5854c59d19a

  • SHA512

    6b0cfb57064d246fe8353bc6e8ceb0bc05f1b1f960f0064476ef5afc895ef9075deec8b0bc1c1f1343aa9284393a3e872bc9cf7376553b7a70a6daf345a54a59

  • SSDEEP

    1536:AVTod19FSb23kBDsqWZiHamN2lc6n/Ia/CcDc+8vlFb3xK5f0m8VBR/X/SBeE:AKz9Ii3aDsqR98bQa/vc+MbQfrABRioE

Malware Config

Extracted

Family

icedid

Campaign

1313163077

C2

oilcardirtoz.com

Targets

    • Target

      0d544614b47400768cf210c2e4d1a298e5cae36820c7b1b6327bb67b8e3ea8cb

    • Size

      375KB

    • MD5

      d24053e88149fee100f6d0fd88a5c118

    • SHA1

      69084f340ff60656df3a73fb9d0e3cffee9ae667

    • SHA256

      0d544614b47400768cf210c2e4d1a298e5cae36820c7b1b6327bb67b8e3ea8cb

    • SHA512

      cf8331b06f6d34b19ca817cc77c1854e6319456cc4f2d4753911711d98b439f0204a6f2278a73c521d43cf462fcf2b49a722fa7809af2954cc0e1721db4b4734

    • SSDEEP

      6144:/lvrP7tlUH7tBtGop4h1ee2k6Sn4s68dTcEgDAIpiWe97TzGux0siC6pEOEGElVP:9vrPsSo9tmNhdhr

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks