General

  • Target

    Setup_Win_26-01-2023_17-03-10.exe

  • Size

    700MB

  • Sample

    230126-yxl5csfc59

  • MD5

    faefa24609e44cbf05b476a86c4fddd7

  • SHA1

    59edcee0e403b50b839676132b957ad085a09043

  • SHA256

    0a42933423b4f895036e70afc07ab21cf59b0f812471e98cb74fb09d6e8c6e8a

  • SHA512

    f21e1608883383e4075c74dd10067647fd83532d027506dd7c76df25765b057e3ee891990e1869e75f9c75679efa64e85b16fb58b30dc98ad532fd967d14e83c

  • SSDEEP

    3072:Spamxv9ROlxf81bwdtkNFDHqkZOqrFQKCVvRuYLiPb0/yklUrSlhPJa97FeZfSQ:ka0VR18diGkZOO6LVvWQ/yEUrSUMh

Malware Config

Extracted

Family

icedid

Campaign

176945684

C2

ilioskajyzi.com

Targets

    • Target

      Setup_Win_26-01-2023_17-03-10.exe

    • Size

      700MB

    • MD5

      faefa24609e44cbf05b476a86c4fddd7

    • SHA1

      59edcee0e403b50b839676132b957ad085a09043

    • SHA256

      0a42933423b4f895036e70afc07ab21cf59b0f812471e98cb74fb09d6e8c6e8a

    • SHA512

      f21e1608883383e4075c74dd10067647fd83532d027506dd7c76df25765b057e3ee891990e1869e75f9c75679efa64e85b16fb58b30dc98ad532fd967d14e83c

    • SSDEEP

      3072:Spamxv9ROlxf81bwdtkNFDHqkZOqrFQKCVvRuYLiPb0/yklUrSlhPJa97FeZfSQ:ka0VR18diGkZOO6LVvWQ/yEUrSUMh

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks