General

  • Target

    Setup_Win_24-01-2023_17-01-52.zip

  • Size

    857KB

  • Sample

    230124-yqdjmsde22

  • MD5

    2ed64d980cc773b019b8d114ba413163

  • SHA1

    294a376fd9c816869028d4f72d38967c041d621a

  • SHA256

    ba0743df409f0176c11637524ea85cda7da7d0e36d5f2b0c7614c2d70f0a533a

  • SHA512

    b76a9bd72a8416f07d873c4fc2da057618ea8206ae05c3a128fc287f4c21235904c51d5b4402612c00b58c699e6434bb9ff61bed7131082be14912b78eece101

  • SSDEEP

    3072:Cw3D57Q9xcjANZeSxYl833AzGVllBI/eXetBoEfDcsoZ4IX7PMnNTD7rt6xE+S0O:931QHISp3AY02XaBDc9eNTHx6T2

Malware Config

Extracted

Family

icedid

Campaign

3324185820

C2

druidfenixis.com

Targets

    • Target

      Setup_Win_24-01-2023_17-01-50.exe

    • Size

      700.3MB

    • MD5

      6908aa1c9f661ffd4d904a7bc1505c74

    • SHA1

      730843fad7880562e63580d312294c14cbb66f78

    • SHA256

      e4623bb4e1a8f69af039fcb3d30a24cad0ff7822b1189a7fe9b0da74f26f226c

    • SHA512

      68ee90517b09b1826adb5cd7363d29b9332c426b9626aecf0fdc75b5f39597810d195668afc2abc07b5abf36326146ff1efd6f1e08c54dfb18f54eefe12eba06

    • SSDEEP

      6144:CAHUFNIhsCZaNuaG8Hya5EDZObAnvx7LzKJk3Y1e5KRXmQzFtYVMN:3UFUvxaZnaD7+JZCy

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks