General

  • Target

    Setup_Win_02-02-2023_17-40-53.zip

  • Size

    825KB

  • Sample

    230202-wddyjafh59

  • MD5

    ef7fecb7f13c4fe8eb1eb59977ccefd3

  • SHA1

    3a666934115d844cbe580930a582714b72279fd7

  • SHA256

    930dee7d9b3d4fcb6eaad272694f4552080532bda0c51975326dbf1ad17f92b8

  • SHA512

    cf8e95f8b2922a5dadcba0a0a352d38b281cbe4199246e5e1cfe4443b4a24f8d6cd0df5c3ead3219c6e2d76301551e5f177f9843eedbb3c1c2a6a5e432751a75

  • SSDEEP

    3072:Gt1do+pRGOWbRqYTX/DtBMuAuKJpc9+Bp2liWv:Gt1CFTX/nAFi22ii

Malware Config

Extracted

Family

icedid

Campaign

1398120717

C2

loliapitudet.com

Targets

    • Target

      Setup_Win_02-02-2023_17-40-52.exe

    • Size

      703.3MB

    • MD5

      8879e4b167ecdbe05b4c82e7c537b3ff

    • SHA1

      89b21179d1e3ad21449899eb5fd1a7a8e274f165

    • SHA256

      c993606b61f059efe7409b6a2036b1a519f6896ce80f6693c90c601cf7e67c55

    • SHA512

      ebff4a5769ee004b7aca004bc6bc551405b5b046eafed9763687f89aa0cab752e0b87f1166edf85eed3fdf1c479c7c97910740e168c1b90cfef2dd0d1a6b7bcc

    • SSDEEP

      6144:kzXaEsb8gUAWTibyk0Px1ee2k6S94s68dTcEgDAIpiWe97TzGux0siC6pEOEGElW:k29c+P0Z9tm7sdG

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks