General

  • Target

    Setup_Win_25-01-2023_16-25-57.zip

  • Size

    814KB

  • Sample

    230126-ac16sacg51

  • MD5

    88ce2ee78642fd6c5be71ade471dc72b

  • SHA1

    718ccfb462849dffacda935f152e2e83d250080d

  • SHA256

    bd2ed2528b1812edeac519c88a07c9db26f1b24e2467889de9e7d69dc23638b6

  • SHA512

    ab632a27b3ee2143383bcc5d59612eaa85c5d06f5e3b18a9492b6f7bc5afce219da43f3bfd5b99cefc8b5eb6765e2eeb2fee65fe9841db6cf8c30699f6aaaa21

  • SSDEEP

    1536:E132jIjrpXWOKP9vJmklcXnSuzB+7Y7l2YrvgIv7RgCXkhGyMz9vFNjn:E48JFImHXSuzB+YzB7RgZherNjn

Malware Config

Extracted

Family

icedid

Campaign

1392658338

C2

nrncipalmoonw.com

Targets

    • Target

      Setup_Win_25-01-2023_16-25-55.exe

    • Size

      700.2MB

    • MD5

      ca426dfd3acc18aafff4ab021c1f9acb

    • SHA1

      88be611b943a31a32b16850bb5e4c03c430ede83

    • SHA256

      186893b21a88925cda0729ac405eb95f59ef26608b9fa27a38fcb4dcf5ff3140

    • SHA512

      2b070e298528ecf835d8a2dc0e55fbf84aabb061ac621a1efa8f722b1a7a44354867dcb3075af7874bd4695c6625bfb52ccae2923332c33c3c7c459e04031159

    • SSDEEP

      6144:vEwzu35pbRYlB/DZxT+O3whxYVcLX+xf8OB3hceNl:fzmolB/rTx3whxYOPWv

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks