General

  • Target

    inject.exe

  • Size

    16KB

  • Sample

    230119-msvedsfg26

  • MD5

    153dc369ae15758d950f99dbf102c28f

  • SHA1

    32be8cc4e15f031f2f87ea783967cec6cd014e5e

  • SHA256

    884cdf248d0235d77adc1d88603d460d64c88c517d5e571b75749be42364d6a8

  • SHA512

    18b22affb1a86c2c40b9574d28c11ccda5a5aad603535fcacf4cc2f97891a250faf3108cb90f81070a53aad5bcfd289cb171ccb1f86bb99f99b0ad7d6423b99b

  • SSDEEP

    192:/ZKbCHpfVTIFyzPDufy2yz7ZBKUFf636yXoMV5PM6E632:xKbCHFHzmy1z1896yHM6E632

Malware Config

Extracted

Family

icedid

Campaign

3248465841

C2

qsertopinajil.com

Extracted

Family

icedid

Campaign

3248465841

Targets

    • Target

      inject.exe

    • Size

      16KB

    • MD5

      153dc369ae15758d950f99dbf102c28f

    • SHA1

      32be8cc4e15f031f2f87ea783967cec6cd014e5e

    • SHA256

      884cdf248d0235d77adc1d88603d460d64c88c517d5e571b75749be42364d6a8

    • SHA512

      18b22affb1a86c2c40b9574d28c11ccda5a5aad603535fcacf4cc2f97891a250faf3108cb90f81070a53aad5bcfd289cb171ccb1f86bb99f99b0ad7d6423b99b

    • SSDEEP

      192:/ZKbCHpfVTIFyzPDufy2yz7ZBKUFf636yXoMV5PM6E632:xKbCHFHzmy1z1896yHM6E632

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks