General

  • Target

    Malicious_462187d1a1e75e5a387cbc4b0dae72b94354b4db51dbcd85769da7b1bf2f7719.exe

  • Size

    75KB

  • Sample

    230702-xy3m3aec2x

  • MD5

    ca716f3ee867f004d35ae2118697fa84

  • SHA1

    5c80b2c8f83de4cc12f365ac6b5e839ecb9c8343

  • SHA256

    462187d1a1e75e5a387cbc4b0dae72b94354b4db51dbcd85769da7b1bf2f7719

  • SHA512

    9ad50be4d48e645c6136cefd0b1eb9a555939425766f2037b75adf322174b6d07937bee204912db2781a44db5273639f95597da13827df5a03dd20075a54c649

  • SSDEEP

    1536:CY53MNyZS2TinPvX+3pBn9EYm3lHMyYoTivf:x530ysqinXU39E/3lRA

Malware Config

Extracted

Family

icedid

Campaign

4213125251

C2

asforthemines99.uno

Targets

    • Target

      Malicious_462187d1a1e75e5a387cbc4b0dae72b94354b4db51dbcd85769da7b1bf2f7719.exe

    • Size

      75KB

    • MD5

      ca716f3ee867f004d35ae2118697fa84

    • SHA1

      5c80b2c8f83de4cc12f365ac6b5e839ecb9c8343

    • SHA256

      462187d1a1e75e5a387cbc4b0dae72b94354b4db51dbcd85769da7b1bf2f7719

    • SHA512

      9ad50be4d48e645c6136cefd0b1eb9a555939425766f2037b75adf322174b6d07937bee204912db2781a44db5273639f95597da13827df5a03dd20075a54c649

    • SSDEEP

      1536:CY53MNyZS2TinPvX+3pBn9EYm3lHMyYoTivf:x530ysqinXU39E/3lRA

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks