General

  • Target

    Setup_Win_13-02-2023_16-33-16.zip

  • Size

    801KB

  • Sample

    230214-hy83hsah6z

  • MD5

    599872eb6e1076375f77f5a04ab167fb

  • SHA1

    c724f6b737562e1bf9dcd149e5ec13f9631ae5c9

  • SHA256

    3abf775b4cf70b7e0b86288320b3ce39483ea7b4b2073dc14204c2e229c9f6bf

  • SHA512

    80287d5323223c44d7f09abc0c06ff1bf53c641b959f304e9f2e21252bece161c6c2dd5afea88b6f406928b7eb6ad2fd583c0590268c3aeef3c74823805bbf1c

  • SSDEEP

    1536:z6HjCojFMRGhROi0Pa0nGb/3T6OR2JnqikaSsqPTatEclmJvwD7RYcFeIik:z6HjvFMRTi1qO/3TaJnrSnCOoGEeI9

Malware Config

Extracted

Family

icedid

Campaign

2076641214

C2

alishabrindeader.com

Targets

    • Target

      Setup_Win_13-02-2023_16-33-14.exe

    • Size

      708.3MB

    • MD5

      7327fb493431fa390203c6003bd0512f

    • SHA1

      1b2da3d17e88dba864a53350a0e24e9e96458a2e

    • SHA256

      68fcd0ef08f5710071023f45dfcbbd2f03fe02295156b4cbe711e26b38e21c00

    • SHA512

      fb5783494535b3b99ea1ceec071723334a3a4166ea566912fb01fd33df54ffd6c8777a53a43e3209a8c46830cf8ded274a4675fab4d6c56d64431a0bd0916590

    • SSDEEP

      3072:nbRlETFNpVR3utDFr0IiYimbUAEG6aOyYYNqGHY7MZa2LaE60:bCdei1aUA16ajKMz

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks