Resubmissions

10-04-2023 12:38

230410-pt9a2shd63 10

25-03-2023 01:59

230325-cet7csae86 10

General

  • Target

    d91dee9dfbdbf0b35593424723052a55.bin

  • Size

    271KB

  • Sample

    230325-cet7csae86

  • MD5

    5fba4f9fc49dd6eb321185b52340790f

  • SHA1

    bf27ebe68f0bdd7c32f3251235e1d00523a66b07

  • SHA256

    0dec9b97ed80b6685816fcc0d40e497afe2130e86b10df3e54e303f5b4d768db

  • SHA512

    0ec77d3d26724a1923a6f54cc64729914599c1f9c451ae5f2c84d894481df303656807106ccf335bca791535e2f98df961d5e3fe5a032b81f5583df713abfaf9

  • SSDEEP

    6144:YPyy3yFknwAr6wNAWxNefuxboLUFoUcWbiauEb7p+/daR:YPdtnw6+WCfibtBHuEvpH

Malware Config

Extracted

Family

icedid

Campaign

73743838

C2

aoureskindzet.com

Targets

    • Target

      009381653fade0d3b94ad0fa0a109c294ac55936a5d1ced44e18fb08188aa7df.exe

    • Size

      391KB

    • MD5

      d91dee9dfbdbf0b35593424723052a55

    • SHA1

      813c274e68916cba601134f689788e938f7ef9e7

    • SHA256

      009381653fade0d3b94ad0fa0a109c294ac55936a5d1ced44e18fb08188aa7df

    • SHA512

      b15064ae8ae5c2c1828d0e8058e12b2655525761c4366278bdb13f82f104b573ee014f8132e5b1c6cc79bc3f9e6d6a92c76a8184bdffe9f108f9b1f74a14a448

    • SSDEEP

      6144:EOUzREbq7Y9m47z+RtK87+YZSZXYSBdyvo+Rhw00C0Ul0YdxwW1Pi4QnpUk/rTwx:HUGbq0s4mR0SSZq3EuSX3wMW5vd

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks