General

  • Target

    Malicious_cc54c29a01e64e6385bf853edc56f156f18128949620eb6008a00210d97f54d2.exe

  • Size

    64KB

  • Sample

    230702-xwsebaea5t

  • MD5

    a3f36c27cd06188178c5e7dbca729c80

  • SHA1

    33fd0cec359c664c250087b3afb44cefaf7da6b3

  • SHA256

    cc54c29a01e64e6385bf853edc56f156f18128949620eb6008a00210d97f54d2

  • SHA512

    4488a57f51f20c9ed272dfca614099682b338c024dff0bb9dc1950701de1163d9a55252a3213f7499387acfe574eae7be15f7b26a09b411827351b6a4113becc

  • SSDEEP

    1536:roBHSfku/TguqNKM6C6E+YUv3EXmYOiKsU:roBS8Q0R68Xys

Malware Config

Extracted

Family

icedid

Campaign

2046050

C2

calldivorce.fun

Targets

    • Target

      Malicious_cc54c29a01e64e6385bf853edc56f156f18128949620eb6008a00210d97f54d2.exe

    • Size

      64KB

    • MD5

      a3f36c27cd06188178c5e7dbca729c80

    • SHA1

      33fd0cec359c664c250087b3afb44cefaf7da6b3

    • SHA256

      cc54c29a01e64e6385bf853edc56f156f18128949620eb6008a00210d97f54d2

    • SHA512

      4488a57f51f20c9ed272dfca614099682b338c024dff0bb9dc1950701de1163d9a55252a3213f7499387acfe574eae7be15f7b26a09b411827351b6a4113becc

    • SSDEEP

      1536:roBHSfku/TguqNKM6C6E+YUv3EXmYOiKsU:roBS8Q0R68Xys

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks