General

  • Target

    YX-49619742.exe

  • Size

    135KB

  • Sample

    230228-zs72pscg2z

  • MD5

    f6b8b3241019521f14a4fba083b8de93

  • SHA1

    e4ffe5e1f3830109764e90062f73e376c67266ec

  • SHA256

    7367b2a89f930e12301f5c432a169ea257a761bd9c5e620cb0b17a534de16b97

  • SHA512

    26088286aeeb5cdcf23283c4b4ff02b929eaad0187512a4475364eb5dec9fe420da761a06cdbb580f74ad243ff615c68921a3b93b892dd70ecddb1368655de78

  • SSDEEP

    3072:OnnBjBbIlOPvPK+0SeSZlz4YUYRHIjyvt9XIWU29:OZBbIlm0vYlzgY6je4Bu

Malware Config

Extracted

Family

icedid

Campaign

1348756909

C2

utorsabegot.com

Targets

    • Target

      YX-49619742.exe

    • Size

      135KB

    • MD5

      f6b8b3241019521f14a4fba083b8de93

    • SHA1

      e4ffe5e1f3830109764e90062f73e376c67266ec

    • SHA256

      7367b2a89f930e12301f5c432a169ea257a761bd9c5e620cb0b17a534de16b97

    • SHA512

      26088286aeeb5cdcf23283c4b4ff02b929eaad0187512a4475364eb5dec9fe420da761a06cdbb580f74ad243ff615c68921a3b93b892dd70ecddb1368655de78

    • SSDEEP

      3072:OnnBjBbIlOPvPK+0SeSZlz4YUYRHIjyvt9XIWU29:OZBbIlm0vYlzgY6je4Bu

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks