General

  • Target

    Malicious_cad8ece30531201bf66f97d6b8385ad7203782e7402e5ba6db84cd6ec1a59a79.exe

  • Size

    64KB

  • Sample

    230702-xwrssacg53

  • MD5

    6e7205bdf67b42a04b5a04d0b4f79c8d

  • SHA1

    eddbeebeafb88451016dc4ed1739cde73b45696c

  • SHA256

    cad8ece30531201bf66f97d6b8385ad7203782e7402e5ba6db84cd6ec1a59a79

  • SHA512

    78cd43b88eee17b7889e6a5219183ea827cb96fda7e8713c7945d6d77937c1467cff50555cae6c69caef1b1e78eae4b1e7953bb51a4dcc4606fb6700caf284b7

  • SSDEEP

    1536:roBHSfku/TguqNKM6C6E+YUv3EXmYOiKsU:roBS8Q0R68Xys

Malware Config

Extracted

Family

icedid

Campaign

2046050

C2

calldivorce.fun

Targets

    • Target

      Malicious_cad8ece30531201bf66f97d6b8385ad7203782e7402e5ba6db84cd6ec1a59a79.exe

    • Size

      64KB

    • MD5

      6e7205bdf67b42a04b5a04d0b4f79c8d

    • SHA1

      eddbeebeafb88451016dc4ed1739cde73b45696c

    • SHA256

      cad8ece30531201bf66f97d6b8385ad7203782e7402e5ba6db84cd6ec1a59a79

    • SHA512

      78cd43b88eee17b7889e6a5219183ea827cb96fda7e8713c7945d6d77937c1467cff50555cae6c69caef1b1e78eae4b1e7953bb51a4dcc4606fb6700caf284b7

    • SSDEEP

      1536:roBHSfku/TguqNKM6C6E+YUv3EXmYOiKsU:roBS8Q0R68Xys

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks