General

  • Target

    Setup_Win_15-02-2023_18-31-42.zip

  • Size

    809KB

  • Sample

    230215-xpppvadb7s

  • MD5

    afd56eb241a34afd74813a114b6d875c

  • SHA1

    7fed0b557c5fc8d4c61820affcb17a72c65c3484

  • SHA256

    2ac7da9a2d7d4de43bc05c869a0ab9c397a929def4693e21fda87850fc327bf3

  • SHA512

    ba3f0c49f027e79f57b8a0fa2e5803cd1a27a0fc8049c61dc8607212b29a51b34007ffecbdb637b60d6f0dd2e70569a194d25484b2df71209fca6e36eb0ab64a

  • SSDEEP

    3072:M/gkEpZGKkxJJJ6lu1cCoUYJQXRyAIUufs+tgOz8OYbq:MFEpZdkxJ2lgCU1RJIUXGNL

Malware Config

Extracted

Family

icedid

Campaign

2076641214

C2

alishabrindeader.com

Targets

    • Target

      Setup_Win_15-02-2023_18-31-39.exe

    • Size

      708.3MB

    • MD5

      732e9dd4f59940c7305b42be3bf6dee6

    • SHA1

      d3ac1b871007f572c439fdede13c42b30c082abb

    • SHA256

      17ecd92abf803b1d922eb945205e0e5d65a9de44e2547325fb658c13d3f8337d

    • SHA512

      5d54cfafafdbbcfeeb04e163f061c7dc1b835d2730991e27716770bc2ac6df34ebc82aaff69dfc40d03a10af63b84cc58a2c2588f9907b8c40b03b7076bd7100

    • SSDEEP

      3072:ibRlETFNpVR3utDFr0IiYimbUAEG6aOyYYNqGHY7MZa2LaE60DVgxxPs:0Cdei1aUA16ajKMzok

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks