General

  • Target

    be76e955bcf26aea0c45bc339c875494.bin

  • Size

    380KB

  • Sample

    230123-sthd4sfe21

  • MD5

    be76e955bcf26aea0c45bc339c875494

  • SHA1

    a4a362f4d18b82334bc834990a92b2640154558b

  • SHA256

    74ec1aefc915a939cda2b028d778566e341c2ef81186a5861b677e3bc6707623

  • SHA512

    dac5011c851993885267d99058cde335997f8c9486a511fe35f78e4e806ce74de96f0919222d0cea79cfbeb6f541af16679243b288f84739a90f559abac09cc0

  • SSDEEP

    6144:UCjagQMt24rn2QQcIU9ycLHvomnVomk81Wa+V7HH2424rn2bBnHIsWrXIy4tBuu4:RjjQMt24rn2rcI9mk8nKHD24rn2tnHf0

Malware Config

Extracted

Family

icedid

Campaign

2260774107

C2

godenfasternow.com

Targets

    • Target

      be76e955bcf26aea0c45bc339c875494.bin

    • Size

      380KB

    • MD5

      be76e955bcf26aea0c45bc339c875494

    • SHA1

      a4a362f4d18b82334bc834990a92b2640154558b

    • SHA256

      74ec1aefc915a939cda2b028d778566e341c2ef81186a5861b677e3bc6707623

    • SHA512

      dac5011c851993885267d99058cde335997f8c9486a511fe35f78e4e806ce74de96f0919222d0cea79cfbeb6f541af16679243b288f84739a90f559abac09cc0

    • SSDEEP

      6144:UCjagQMt24rn2QQcIU9ycLHvomnVomk81Wa+V7HH2424rn2bBnHIsWrXIy4tBuu4:RjjQMt24rn2rcI9mk8nKHD24rn2tnHf0

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks