Resubmissions

17-07-2023 07:22

230717-h7l94saf59 10

10-01-2023 23:26

230110-3ev2rsaa26 10

General

  • Target

    05a3a84096bcdc2a5cf87d07ede96aff7fd5037679f9585fee9a227c0d9cbf51

  • Size

    360KB

  • Sample

    230110-3ev2rsaa26

  • MD5

    f4239e545b7e85527babcf8cb130df6f

  • SHA1

    b7857b40b7e62fd5824c8d44cf3cf0afb993093d

  • SHA256

    05a3a84096bcdc2a5cf87d07ede96aff7fd5037679f9585fee9a227c0d9cbf51

  • SHA512

    1731c9b04935066a3e8535bb470c58348d5559fd52ac5dbe81b7c89d1bb3990ea41fa2a64e42cae2b797547721c3ddbace8ad78a3587c2a29567d2570c9d8cc1

  • SSDEEP

    6144:tEzU6tlWhUspDKNU/BTri4vUPfEvtR4XPssmxVDhScT951nHhZAbohOn3:SzUAlW6shUUpi4cPfEvtWEBAo+

Malware Config

Extracted

Family

icedid

Campaign

1139942657

C2

bayernbadabum.com

Targets

    • Target

      05a3a84096bcdc2a5cf87d07ede96aff7fd5037679f9585fee9a227c0d9cbf51

    • Size

      360KB

    • MD5

      f4239e545b7e85527babcf8cb130df6f

    • SHA1

      b7857b40b7e62fd5824c8d44cf3cf0afb993093d

    • SHA256

      05a3a84096bcdc2a5cf87d07ede96aff7fd5037679f9585fee9a227c0d9cbf51

    • SHA512

      1731c9b04935066a3e8535bb470c58348d5559fd52ac5dbe81b7c89d1bb3990ea41fa2a64e42cae2b797547721c3ddbace8ad78a3587c2a29567d2570c9d8cc1

    • SSDEEP

      6144:tEzU6tlWhUspDKNU/BTri4vUPfEvtR4XPssmxVDhScT951nHhZAbohOn3:SzUAlW6shUUpi4cPfEvtWEBAo+

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks