General

  • Target

    Contract_March_23_INV#398.exe

  • Size

    387KB

  • Sample

    230323-ypltmabg6z

  • MD5

    7341d040f097c8eb909f603edda9699b

  • SHA1

    d3b5147d611b2c0e8d137dda2d54ae466803f822

  • SHA256

    ee758459375c285ead4df29b1d2de2c514426bbde79cb2d0b563258324060767

  • SHA512

    8baf61aed27ebc8f35334b18eb91c01dcabafca5ac0fb17e41aaeac19afb03528f468cdb76fdcdfacab5df52d3b675df2eb3b4d016bbf0b382314fb7a89a5f62

  • SSDEEP

    6144:C/e3ejdNii66Gg5rYQqQgLafzES2IFEY9yH0Njxp98gD/xDK9az6xJNDpDShxUQE:seo3iidjrYEgLUE+JBxPNmJND0o1

Malware Config

Extracted

Family

icedid

Campaign

73743838

C2

aoureskindzet.com

Targets

    • Target

      Contract_March_23_INV#398.exe

    • Size

      387KB

    • MD5

      7341d040f097c8eb909f603edda9699b

    • SHA1

      d3b5147d611b2c0e8d137dda2d54ae466803f822

    • SHA256

      ee758459375c285ead4df29b1d2de2c514426bbde79cb2d0b563258324060767

    • SHA512

      8baf61aed27ebc8f35334b18eb91c01dcabafca5ac0fb17e41aaeac19afb03528f468cdb76fdcdfacab5df52d3b675df2eb3b4d016bbf0b382314fb7a89a5f62

    • SSDEEP

      6144:C/e3ejdNii66Gg5rYQqQgLafzES2IFEY9yH0Njxp98gD/xDK9az6xJNDpDShxUQE:seo3iidjrYEgLUE+JBxPNmJND0o1

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks