General

  • Target

    Docs_Unpaid_#367.exe

  • Size

    620KB

  • Sample

    230324-xcbx8aag4s

  • MD5

    d659e03354a9657001d5136308449d5c

  • SHA1

    0f440e15ab54adf7f699d980fd436b3e5f03e20e

  • SHA256

    1e2aaed890f3a5e5657d6806bcf6756bbdef9baeca203330ad862dcf47ddf885

  • SHA512

    6c41c6beba2384538585cb5dbd495847a32cf944cbc43c017f4c47b9cb92dbab7e485df7f73f2288bbd4cf9d1d5f01b396e613ebf3fb17198fabc34e48c3e86c

  • SSDEEP

    6144:vvJefQe21l/7o+zmG6abwLPcwUSgm1IWAH1c9/MJOBlX4Bd3uyWFACWPgkqTXzm6:vRloG6abwLPVRaqLm3VdGPEBj/eZb

Malware Config

Extracted

Family

icedid

Campaign

1883783121

C2

liguspotforsit.com

Targets

    • Target

      Docs_Unpaid_#367.exe

    • Size

      620KB

    • MD5

      d659e03354a9657001d5136308449d5c

    • SHA1

      0f440e15ab54adf7f699d980fd436b3e5f03e20e

    • SHA256

      1e2aaed890f3a5e5657d6806bcf6756bbdef9baeca203330ad862dcf47ddf885

    • SHA512

      6c41c6beba2384538585cb5dbd495847a32cf944cbc43c017f4c47b9cb92dbab7e485df7f73f2288bbd4cf9d1d5f01b396e613ebf3fb17198fabc34e48c3e86c

    • SSDEEP

      6144:vvJefQe21l/7o+zmG6abwLPcwUSgm1IWAH1c9/MJOBlX4Bd3uyWFACWPgkqTXzm6:vRloG6abwLPVRaqLm3VdGPEBj/eZb

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks