General

  • Target

    SetupWin18-01-202317-44-13.exe

  • Size

    431KB

  • Sample

    230119-d23bxseb36

  • MD5

    55fabc6b83edfba269d697a7973cb837

  • SHA1

    13ca26df9e0f7fb04596cbf52aa542a54d0a2e10

  • SHA256

    b1ef43379c1af0ed2bbc2dd710df65a550b3b80cce1b734438e20c64f1d5a42e

  • SHA512

    0dda3ef1fce563b892ce56ca9e7f802a8b4d0d6a73f37fb46b8e263c55382a5c2a6309ce7922b49534e00165141965783eb28e222a515a1d54ee0dbd1c2ea612

  • SSDEEP

    6144:1zzkhbh8r2y6gudO7sBdvkJ5mXWboh4cd1gJkrW4MqR823v1djjJIAOVY:1EhbGjyY7sncGXWbo3d9MqRnjjGAH

Malware Config

Extracted

Family

icedid

Campaign

3248465841

C2

qsertopinajil.com

Targets

    • Target

      SetupWin18-01-202317-44-13.exe

    • Size

      431KB

    • MD5

      55fabc6b83edfba269d697a7973cb837

    • SHA1

      13ca26df9e0f7fb04596cbf52aa542a54d0a2e10

    • SHA256

      b1ef43379c1af0ed2bbc2dd710df65a550b3b80cce1b734438e20c64f1d5a42e

    • SHA512

      0dda3ef1fce563b892ce56ca9e7f802a8b4d0d6a73f37fb46b8e263c55382a5c2a6309ce7922b49534e00165141965783eb28e222a515a1d54ee0dbd1c2ea612

    • SSDEEP

      6144:1zzkhbh8r2y6gudO7sBdvkJ5mXWboh4cd1gJkrW4MqR823v1djjJIAOVY:1EhbGjyY7sncGXWbo3d9MqRnjjGAH

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks