General

  • Target

    Setup_Win_24-01-2023_20-15-52.zip

  • Size

    857KB

  • Sample

    230124-z4dl8sfe21

  • MD5

    3a34a5793e9960b02d0a4cb6c2f3ce7d

  • SHA1

    a71d76937a6692ee6a464f647b9cb2f611b2dd45

  • SHA256

    48b58de3996503858e505233b0bc910a4e0b97e8a7334446fc717c9f71f843da

  • SHA512

    4a4acfad357b45c909934ca2faddda830e96a5b003922b84e97337540cd5baa1e2cf66fa783f9fc3309ae4b5df0e0a0328a1bf900d98abde772831f3fb9cc0c1

  • SSDEEP

    3072:uGWWGuTmNtzdA/YvODaoso8lVdhKekLH9uaLig7VDN8NatI+ELNjXqgyVE:MpNPiYuaoF8TdhKLLH9OgxjaxjiE

Malware Config

Extracted

Family

icedid

Campaign

3324185820

C2

druidfenixis.com

Targets

    • Target

      Setup_Win_24-01-2023_20-15-51.exe

    • Size

      700.3MB

    • MD5

      7887eb4ee8876981f240e9b46ac1f200

    • SHA1

      510d3dd73b308449b3b5dc5d67272b9c6366828c

    • SHA256

      08d07eba59a894a9984d602f14df4dfe17a42074a5fed2eb5c4dd978385411e2

    • SHA512

      00d2eaada6662b53808ae95a1a7450d34bc08ededa5e522aa78291b584c4737bce6a0f6278016fd8dc025ce8b8a2025ca1b1d4296352d02b6902ad4c23c0b014

    • SSDEEP

      6144:VAHUFNIhsCZaNuaG8Hya5EDZObAnvx7LzKJk3Y1e5KRXmQzFtYVRY:yUFUvxaZnaD7+JZCu

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks