General

  • Target

    icedid_out.exe

  • Size

    229KB

  • Sample

    230126-dq1zqadg8s

  • MD5

    2e6808a4d0c8cfd1d9a347f8cf80dc6d

  • SHA1

    8e91332481b033b4af9c24f65e3d24b10e60234b

  • SHA256

    dfb3e5f557a17c8cdebdb5b371cf38c5a7ab491b2aeaad6b4e76459a05b44f28

  • SHA512

    f631e6b7396a552486debadd205a1be94975400e34a3628fd542c3587f31ab14b3d6dc780f4f7768b5c143efd7df9ed95bdc20047a8272f22d9355f2e10e65bc

  • SSDEEP

    6144:XEwzu35pbRYlB/DZxT+O3whxYVcLX+xf8OB3hceW:XzmolB/rTx3whxYOPWq

Malware Config

Extracted

Family

icedid

Campaign

1392658338

C2

nrncipalmoonw.com

Targets

    • Target

      icedid_out.exe

    • Size

      229KB

    • MD5

      2e6808a4d0c8cfd1d9a347f8cf80dc6d

    • SHA1

      8e91332481b033b4af9c24f65e3d24b10e60234b

    • SHA256

      dfb3e5f557a17c8cdebdb5b371cf38c5a7ab491b2aeaad6b4e76459a05b44f28

    • SHA512

      f631e6b7396a552486debadd205a1be94975400e34a3628fd542c3587f31ab14b3d6dc780f4f7768b5c143efd7df9ed95bdc20047a8272f22d9355f2e10e65bc

    • SSDEEP

      6144:XEwzu35pbRYlB/DZxT+O3whxYVcLX+xf8OB3hceW:XzmolB/rTx3whxYOPWq

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks