General

  • Target

    deflated-Setup_Win_26-01-2023_22-42-32.exe

  • Size

    253KB

  • Sample

    230127-er9hxsgd64

  • MD5

    a6cecd3cce9a0d0c10b80d485b594bd9

  • SHA1

    68396fd18815b5a43921e962ab3ed104a628d0f6

  • SHA256

    5470f7f1fb4416e1f5e460f893e27b70bfd609ff0ca0c43d3510233f4f22b7b0

  • SHA512

    1804b2a17b62cce5a38e97911e17bc61ba60590888dc6e8954f2dfee52b85f7b0778d4af8894fa9198c2c7dbae51dcb186eb6e9b44dfb6b285e85f71c9370aec

  • SSDEEP

    3072:Svamxv9ROlxf81bwdtkNFDHqkZOqrFQKCVvRuYLiPb0/yklUrSlhPJal:Wa0VR18diGkZOO6LVvWQ/yEUrSK

Malware Config

Extracted

Family

icedid

Campaign

176945684

C2

ilioskajyzi.com

Targets

    • Target

      deflated-Setup_Win_26-01-2023_22-42-32.exe

    • Size

      253KB

    • MD5

      a6cecd3cce9a0d0c10b80d485b594bd9

    • SHA1

      68396fd18815b5a43921e962ab3ed104a628d0f6

    • SHA256

      5470f7f1fb4416e1f5e460f893e27b70bfd609ff0ca0c43d3510233f4f22b7b0

    • SHA512

      1804b2a17b62cce5a38e97911e17bc61ba60590888dc6e8954f2dfee52b85f7b0778d4af8894fa9198c2c7dbae51dcb186eb6e9b44dfb6b285e85f71c9370aec

    • SSDEEP

      3072:Svamxv9ROlxf81bwdtkNFDHqkZOqrFQKCVvRuYLiPb0/yklUrSlhPJal:Wa0VR18diGkZOO6LVvWQ/yEUrSK

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks