General

  • Target

    Malicious_fa18ed55b36b15491fc2f51c13bbe897cd0bd623fd864c7f300a7890fe19c610.exe

  • Size

    64KB

  • Sample

    230702-xw7t1acg85

  • MD5

    61b5c98b66c5c3ebe480cba5f8e9cd7b

  • SHA1

    4bf1e2e27b6d13b024072d70a184b50be19aa748

  • SHA256

    fa18ed55b36b15491fc2f51c13bbe897cd0bd623fd864c7f300a7890fe19c610

  • SHA512

    764da47b0e9eb6bd44e5377d01c1eb9f908aaf6fbc8c76f0be81217e23feb42639f935a2870484dd5241dc125f00c7f99443511038cac27153dc2d0bd3522383

  • SSDEEP

    1536:roBHSfku/TguqNKM6C6E+YUv3EXmYOiKsU:roBS8Q0R68Xys

Malware Config

Extracted

Family

icedid

Campaign

2046050

C2

calldivorce.fun

Targets

    • Target

      Malicious_fa18ed55b36b15491fc2f51c13bbe897cd0bd623fd864c7f300a7890fe19c610.exe

    • Size

      64KB

    • MD5

      61b5c98b66c5c3ebe480cba5f8e9cd7b

    • SHA1

      4bf1e2e27b6d13b024072d70a184b50be19aa748

    • SHA256

      fa18ed55b36b15491fc2f51c13bbe897cd0bd623fd864c7f300a7890fe19c610

    • SHA512

      764da47b0e9eb6bd44e5377d01c1eb9f908aaf6fbc8c76f0be81217e23feb42639f935a2870484dd5241dc125f00c7f99443511038cac27153dc2d0bd3522383

    • SSDEEP

      1536:roBHSfku/TguqNKM6C6E+YUv3EXmYOiKsU:roBS8Q0R68Xys

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks