General

  • Target

    Malicious_8e7461b745f9da80db428a969ee3e54bd8525b714c8cd2d2b4404f4e06ecd6a1.exe

  • Size

    64KB

  • Sample

    230702-xt2j7scf32

  • MD5

    80237331f89eb1595bd724f6b69c6db6

  • SHA1

    2e366edba70f48d91e6f6f7b54ce98642daccb9e

  • SHA256

    8e7461b745f9da80db428a969ee3e54bd8525b714c8cd2d2b4404f4e06ecd6a1

  • SHA512

    3349c91e0c46ffcd63ebab7220a4b499d81bda765474f39525c4745bc3909e81da8d8768f47b5c3edfa9d91b7f85777912bca36c1e0b1e0a37f697f8d6a48f0d

  • SSDEEP

    1536:roBHSfku/TguqNKM6C6E+YUv3EXmYOiKsU:roBS8Q0R68Xys

Malware Config

Extracted

Family

icedid

Campaign

2046050

C2

calldivorce.fun

Targets

    • Target

      Malicious_8e7461b745f9da80db428a969ee3e54bd8525b714c8cd2d2b4404f4e06ecd6a1.exe

    • Size

      64KB

    • MD5

      80237331f89eb1595bd724f6b69c6db6

    • SHA1

      2e366edba70f48d91e6f6f7b54ce98642daccb9e

    • SHA256

      8e7461b745f9da80db428a969ee3e54bd8525b714c8cd2d2b4404f4e06ecd6a1

    • SHA512

      3349c91e0c46ffcd63ebab7220a4b499d81bda765474f39525c4745bc3909e81da8d8768f47b5c3edfa9d91b7f85777912bca36c1e0b1e0a37f697f8d6a48f0d

    • SSDEEP

      1536:roBHSfku/TguqNKM6C6E+YUv3EXmYOiKsU:roBS8Q0R68Xys

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks