General
-
Target
478057d87e40aef6a71453c27eb77649.bin
-
Size
278KB
-
Sample
230123-rtb2nafc3s
-
MD5
0f0f97f5a6c7dcd33f58d377b60895e2
-
SHA1
91eb84af41821b60b819f7f54519628f12f9ecff
-
SHA256
f6c4cb6e5ac0a92ca592e42c3872389827374c36f1df13a957fd7b55b7fb95da
-
SHA512
8e6959c35815c9b9c686ea9cfaecfc46daf7119978a726e7b84736a4154086d191aa9ab940e5474425350753e27d2311ebfd221b0d8157333e05fda09c88e64a
-
SSDEEP
6144:WLjyRrrX905oin6oigT9N0ybRjpVYtjOzzyfB/Pq8mGAsA4xfY9:WLjywl6jQNPjEfevsAeY9
Malware Config
Extracted
icedid
3248465841
qsertopinajil.com
Targets
-
-
Target
Setup_Win_18-01-2023_17-44-13.exe
-
Size
700.4MB
-
MD5
6718a804f5d5064fa3b918d844fd727d
-
SHA1
16cfb4a72bd1c8e8f67a8a5687e118c3774f84f0
-
SHA256
030e7b73e8d7bb187183f3087b8ec5756a8c71698f198754cf5299c86e044199
-
SHA512
e739f4a7d59f7c68600c528cd5fc15f87ca148200331fae8f058d18640baadbf5fa1d45c3d884e249cab52256ebeddb3faecc1a51ddcc63c34be816ebc955bd0
-
SSDEEP
6144:1zzkhbh8r2y6gudO7sBdvkJ5mXWboh4cd1gJkrW4MqR823v1djjJIAOV4Eq:1EhbGjyY7sncGXWbo3d9MqRnjjGAnR
Score10/10-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-