General

  • Target

    2ed64d980cc773b019b8d114ba413163.bin

  • Size

    165KB

  • Sample

    230127-p3txqaag25

  • MD5

    947873b694614463b9626dfa9176b0c6

  • SHA1

    b4a8969b0165bad4717aca5b4978ed2b1fff741c

  • SHA256

    370dc6b8360ce6b4423fe43578e7e4580939bcfcdb37d12dcd7ff898d933a4fd

  • SHA512

    1cdd2236f940d3a18eeebd66e4313aca3fe13bc41d926212097fefc3d5ece539563bbbbe2aa99b38a6f55d882f1b1007b49831fdbdea370dae97a54b762f3886

  • SSDEEP

    3072:JdsDK338lGOgepOiOXGbGBVDoegGf1U8jw2yYQAOuuw42hNNbkbMJDdcI6C0b4NN:JdsGQGe4CGYegGf1Jjw2yYhOMYbMJDSq

Malware Config

Extracted

Family

icedid

Campaign

3324185820

C2

druidfenixis.com

Targets

    • Target

      Setup_Win_24-01-2023_17-01-50.exe

    • Size

      700.3MB

    • MD5

      6908aa1c9f661ffd4d904a7bc1505c74

    • SHA1

      730843fad7880562e63580d312294c14cbb66f78

    • SHA256

      e4623bb4e1a8f69af039fcb3d30a24cad0ff7822b1189a7fe9b0da74f26f226c

    • SHA512

      68ee90517b09b1826adb5cd7363d29b9332c426b9626aecf0fdc75b5f39597810d195668afc2abc07b5abf36326146ff1efd6f1e08c54dfb18f54eefe12eba06

    • SSDEEP

      6144:CAHUFNIhsCZaNuaG8Hya5EDZObAnvx7LzKJk3Y1e5KRXmQzFtYVMN:3UFUvxaZnaD7+JZCy

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks