General

  • Target

    aebff99cbadfa1d5ddcd0167d2fc836e387dfaab2e4db85828ca2278b92c99fd

  • Size

    93KB

  • Sample

    221204-t3fsbaba9s

  • MD5

    2d0c542bb0003b496617af097c843226

  • SHA1

    2143c533d9845d2aac619fa322d4566b5db6e7fe

  • SHA256

    aebff99cbadfa1d5ddcd0167d2fc836e387dfaab2e4db85828ca2278b92c99fd

  • SHA512

    9fdaedd46755b232e1dc2d28de53a91ae4169f7679e17cbd1fcdc8b15a3c21bd0527047f7ad4f271b4c2e8b0914c183bf51f4819ee938b5d624f04bbc98f50e8

  • SSDEEP

    1536:HFLEwtQY623O9IMSa+1oe+FlfkhWaRV5QQVw9W6:GsvMSa+We+XfkhWanlVmW6

Malware Config

Extracted

Family

icedid

C2

explodevices.top

Targets

    • Target

      aebff99cbadfa1d5ddcd0167d2fc836e387dfaab2e4db85828ca2278b92c99fd

    • Size

      93KB

    • MD5

      2d0c542bb0003b496617af097c843226

    • SHA1

      2143c533d9845d2aac619fa322d4566b5db6e7fe

    • SHA256

      aebff99cbadfa1d5ddcd0167d2fc836e387dfaab2e4db85828ca2278b92c99fd

    • SHA512

      9fdaedd46755b232e1dc2d28de53a91ae4169f7679e17cbd1fcdc8b15a3c21bd0527047f7ad4f271b4c2e8b0914c183bf51f4819ee938b5d624f04bbc98f50e8

    • SSDEEP

      1536:HFLEwtQY623O9IMSa+1oe+FlfkhWaRV5QQVw9W6:GsvMSa+We+XfkhWanlVmW6

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks