General

  • Target

    Setup_Win_25-01-2023_03-07-48.zip

  • Size

    857KB

  • Sample

    230125-h7e6ssgh7y

  • MD5

    b385c9fafe941568eee3f736c2f757ba

  • SHA1

    2c901ddb353d8447c5921099572db56b9333a0f5

  • SHA256

    682ed1519f0c21d7fd38bb4f087f13ff031727792ad5fbd3ee18c2f2c8c8bdb2

  • SHA512

    b45e776d88e0a1a40e07cb5bf4baeea5cb9077122711772c3fb552f4c59bc5961ce9c0c64fc7b12f4ef6c0f850f02d5dcbf7b38f909b7c7fabaaa944cf1c8c32

  • SSDEEP

    3072:0w3D57Q9xcjANZeSxYl833AzGVllBI/eXetBoEfDcsoZ4IX7PMnNTqUYcUCJolT:z31QHISp3AY02XaBDc9eNTqUObd

Malware Config

Extracted

Family

icedid

Campaign

3324185820

C2

druidfenixis.com

Targets

    • Target

      Setup_Win_25-01-2023_03-07-46.exe

    • Size

      700.3MB

    • MD5

      fe65486732b9736a7ee41f8aca24f828

    • SHA1

      86934c204373df5d60273ba2821bda121747edec

    • SHA256

      588488ee205c51594695947a9963268959cd48dafa4ef6c53c67cf044f416ae0

    • SHA512

      70da4239525e9a43f37d3eccd20fb0d79a01d4ab0e06f033c01e678e0eb8aca5b80de42178b62425b5ffc9e8244d4e916eb15fc5c21368c97ea35cfa27d68853

    • SSDEEP

      6144:AAHUFNIhsCZaNuaG8Hya5EDZObAnvx7LzKJk3Y1e5KRXmQzFtYVPO:xUFUvxaZnaD7+JZCW

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks