General

  • Target

    Setup_Win_18-01-2023_17-44-13.exe

  • Size

    700.4MB

  • Sample

    230123-lcbrnscf86

  • MD5

    6718a804f5d5064fa3b918d844fd727d

  • SHA1

    16cfb4a72bd1c8e8f67a8a5687e118c3774f84f0

  • SHA256

    030e7b73e8d7bb187183f3087b8ec5756a8c71698f198754cf5299c86e044199

  • SHA512

    e739f4a7d59f7c68600c528cd5fc15f87ca148200331fae8f058d18640baadbf5fa1d45c3d884e249cab52256ebeddb3faecc1a51ddcc63c34be816ebc955bd0

  • SSDEEP

    6144:1zzkhbh8r2y6gudO7sBdvkJ5mXWboh4cd1gJkrW4MqR823v1djjJIAOV4Eq:1EhbGjyY7sncGXWbo3d9MqRnjjGAnR

Malware Config

Extracted

Family

icedid

Campaign

3248465841

C2

qsertopinajil.com

Targets

    • Target

      Setup_Win_18-01-2023_17-44-13.exe

    • Size

      700.4MB

    • MD5

      6718a804f5d5064fa3b918d844fd727d

    • SHA1

      16cfb4a72bd1c8e8f67a8a5687e118c3774f84f0

    • SHA256

      030e7b73e8d7bb187183f3087b8ec5756a8c71698f198754cf5299c86e044199

    • SHA512

      e739f4a7d59f7c68600c528cd5fc15f87ca148200331fae8f058d18640baadbf5fa1d45c3d884e249cab52256ebeddb3faecc1a51ddcc63c34be816ebc955bd0

    • SSDEEP

      6144:1zzkhbh8r2y6gudO7sBdvkJ5mXWboh4cd1gJkrW4MqR823v1djjJIAOV4Eq:1EhbGjyY7sncGXWbo3d9MqRnjjGAnR

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks