General

  • Target

    Malicious_ee41048f96e902d87c43852a737802ae391ff8d5b099feee8832ceecdfab4e46.exe

  • Size

    64KB

  • Sample

    230702-xw4gkscg76

  • MD5

    019cbb71f70a681c1fd516bb3e6cea54

  • SHA1

    d57e64248a87929a52a7a0b0da43871fe28564d3

  • SHA256

    ee41048f96e902d87c43852a737802ae391ff8d5b099feee8832ceecdfab4e46

  • SHA512

    899f5c9bcf344af339c11d850911905361101e76d26957876ff865c20b25fdb8237232fd1d196347675da923360f88b5f08abeaaa2c2b98fda7406cd45612617

  • SSDEEP

    1536:roBHSfku/TguqNKM6C6E+YUv3EXmYOiKsU:roBS8Q0R68Xys

Malware Config

Extracted

Family

icedid

Campaign

2046050

C2

calldivorce.fun

Targets

    • Target

      Malicious_ee41048f96e902d87c43852a737802ae391ff8d5b099feee8832ceecdfab4e46.exe

    • Size

      64KB

    • MD5

      019cbb71f70a681c1fd516bb3e6cea54

    • SHA1

      d57e64248a87929a52a7a0b0da43871fe28564d3

    • SHA256

      ee41048f96e902d87c43852a737802ae391ff8d5b099feee8832ceecdfab4e46

    • SHA512

      899f5c9bcf344af339c11d850911905361101e76d26957876ff865c20b25fdb8237232fd1d196347675da923360f88b5f08abeaaa2c2b98fda7406cd45612617

    • SSDEEP

      1536:roBHSfku/TguqNKM6C6E+YUv3EXmYOiKsU:roBS8Q0R68Xys

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks