General

  • Target

    Setup_Win_15-02-2023_18-31-39.exe

  • Size

    708.3MB

  • Sample

    230215-158pfaeb4y

  • MD5

    732e9dd4f59940c7305b42be3bf6dee6

  • SHA1

    d3ac1b871007f572c439fdede13c42b30c082abb

  • SHA256

    17ecd92abf803b1d922eb945205e0e5d65a9de44e2547325fb658c13d3f8337d

  • SHA512

    5d54cfafafdbbcfeeb04e163f061c7dc1b835d2730991e27716770bc2ac6df34ebc82aaff69dfc40d03a10af63b84cc58a2c2588f9907b8c40b03b7076bd7100

  • SSDEEP

    3072:ibRlETFNpVR3utDFr0IiYimbUAEG6aOyYYNqGHY7MZa2LaE60DVgxxPs:0Cdei1aUA16ajKMzok

Malware Config

Extracted

Family

icedid

Campaign

2076641214

C2

alishabrindeader.com

Targets

    • Target

      Setup_Win_15-02-2023_18-31-39.exe

    • Size

      708.3MB

    • MD5

      732e9dd4f59940c7305b42be3bf6dee6

    • SHA1

      d3ac1b871007f572c439fdede13c42b30c082abb

    • SHA256

      17ecd92abf803b1d922eb945205e0e5d65a9de44e2547325fb658c13d3f8337d

    • SHA512

      5d54cfafafdbbcfeeb04e163f061c7dc1b835d2730991e27716770bc2ac6df34ebc82aaff69dfc40d03a10af63b84cc58a2c2588f9907b8c40b03b7076bd7100

    • SSDEEP

      3072:ibRlETFNpVR3utDFr0IiYimbUAEG6aOyYYNqGHY7MZa2LaE60DVgxxPs:0Cdei1aUA16ajKMzok

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks