General

  • Target

    Malicious_ee31b6ab640ba699d90a27cda568d1427a8f2b9b86bd45336abb6f932ebe489a.exe

  • Size

    64KB

  • Sample

    230702-xw36taea7s

  • MD5

    c850eb6624a6ee797bd967d691195775

  • SHA1

    498725f9663e0017d6acd7764e8a04588f277edc

  • SHA256

    ee31b6ab640ba699d90a27cda568d1427a8f2b9b86bd45336abb6f932ebe489a

  • SHA512

    21cc49a1c9c31ecf3cc701e86ad2a9df5f6bd4cbfe5a45e3bd5df6378882169cf6827b38a83753ac7bca87b87037b861f2b5df48103f345d7f043390fb1952e9

  • SSDEEP

    1536:roBHSfku/TguqNKM6C6E+YUv3EXmYOiKsU:roBS8Q0R68Xys

Malware Config

Extracted

Family

icedid

Campaign

2046050

C2

calldivorce.fun

Targets

    • Target

      Malicious_ee31b6ab640ba699d90a27cda568d1427a8f2b9b86bd45336abb6f932ebe489a.exe

    • Size

      64KB

    • MD5

      c850eb6624a6ee797bd967d691195775

    • SHA1

      498725f9663e0017d6acd7764e8a04588f277edc

    • SHA256

      ee31b6ab640ba699d90a27cda568d1427a8f2b9b86bd45336abb6f932ebe489a

    • SHA512

      21cc49a1c9c31ecf3cc701e86ad2a9df5f6bd4cbfe5a45e3bd5df6378882169cf6827b38a83753ac7bca87b87037b861f2b5df48103f345d7f043390fb1952e9

    • SSDEEP

      1536:roBHSfku/TguqNKM6C6E+YUv3EXmYOiKsU:roBS8Q0R68Xys

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks