General

  • Target

    Setup_Win_24-01-2023_17-31-14.zip

  • Size

    857KB

  • Sample

    230124-wehywach78

  • MD5

    4653b72db84e454c56659cc190e254ec

  • SHA1

    ba4d1626cf09c797c5aabd8c33c9f91dc05f554b

  • SHA256

    66929d5e456695078946cfea55ff20936fd28eb43c07864bd4f0768723569806

  • SHA512

    38893df2cab6e53497e2aa5cc1cd70a252315508893fd808b300fe4ebbb8f8f6657616911cf2887b4f8194be2c8692fc63b2952f1f615a2c46fbdc47f5adcd77

  • SSDEEP

    3072:RGWWGuTmNtzdA/YvODaoso8lVdhKekLH9uaLig7VDN8NatI+EYDq7faAI:BpNPiYuaoF8TdhKLLH9Ogxjasq7yX

Malware Config

Extracted

Family

icedid

Campaign

3324185820

C2

druidfenixis.com

Targets

    • Target

      Setup_Win_24-01-2023_17-31-13.exe

    • Size

      700.3MB

    • MD5

      0b799cb76106cb6a5eb20e29d3d04aa0

    • SHA1

      c241d4dd5bdf5ac1c2ee7d5057a5661729a33234

    • SHA256

      61de19c8fa58840e99c645e42ac689a4e9d6288d90c2f172ecba4dbf0592a070

    • SHA512

      d12b43aff894786f361742685fd70e6113f4fa1d3ad5680742622d4b6864889ff2df25a36c0871816126289f2e7b2705c7c0f6a75438087f0676acdbbdff2bda

    • SSDEEP

      6144:7AHUFNIhsCZaNuaG8Hya5EDZObAnvx7LzKJk3Y1e5KRXmQzFtYVQQb:UUFUvxaZnaD7+JZCl

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks