General

  • Target

    2023-04-27_6865ca56665542cd7d5c1c53a76f32ca_icedid_satan_teardrop.exe.bin

  • Size

    5.0MB

  • Sample

    230501-szxqzsaa54

  • MD5

    6865ca56665542cd7d5c1c53a76f32ca

  • SHA1

    a8c9c66b632f5d2fda9d30f765ebc96ea4123c7a

  • SHA256

    6fa0ea46cdf13cc71d9a164d0291f481d3947ec4f35f2cbf7b5c4a51ae3b0aed

  • SHA512

    ae134bb33333ebbed97acf52a67310b191fe03899bcb1948f3da3a89c04c9d00a892cd0f9190cfd4fef258719cc9f66c87e75bed2d87f9d342f9bb46d6f68505

  • SSDEEP

    49152:ptErfhsOSMa1xYus4Q2D2TgG6hN3gSVsmqoyeBe4:ptEbfa1xNL2g3mrEB/

Malware Config

Extracted

Family

icedid

Targets

    • Target

      2023-04-27_6865ca56665542cd7d5c1c53a76f32ca_icedid_satan_teardrop.exe.bin

    • Size

      5.0MB

    • MD5

      6865ca56665542cd7d5c1c53a76f32ca

    • SHA1

      a8c9c66b632f5d2fda9d30f765ebc96ea4123c7a

    • SHA256

      6fa0ea46cdf13cc71d9a164d0291f481d3947ec4f35f2cbf7b5c4a51ae3b0aed

    • SHA512

      ae134bb33333ebbed97acf52a67310b191fe03899bcb1948f3da3a89c04c9d00a892cd0f9190cfd4fef258719cc9f66c87e75bed2d87f9d342f9bb46d6f68505

    • SSDEEP

      49152:ptErfhsOSMa1xYus4Q2D2TgG6hN3gSVsmqoyeBe4:ptEbfa1xNL2g3mrEB/

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • Matiex

      Matiex is a keylogger and infostealer first seen in July 2020.

    • Matiex Main payload

    • Detectes Phoenix Miner Payload

MITRE ATT&CK Matrix

Tasks