General

  • Target

    Malicious_d12cb1625386a87272359cf22ccc09c7327cbb5593a45f0ec4d9e18f19896018.exe

  • Size

    80KB

  • Sample

    230702-xz1vvsec8t

  • MD5

    a3a09bdba525dfd8e39faf805bbd0649

  • SHA1

    3f749eaf7a53fdb06e1ee6795dcf711e858154c8

  • SHA256

    d12cb1625386a87272359cf22ccc09c7327cbb5593a45f0ec4d9e18f19896018

  • SHA512

    a8d0b9b213ecca832a6cde132f2f8ee5419f40accfe47e6b38ec9c162ea17b2d64458d73e47e49e523db565c5ffbec45bbf963043f112e6cddf4e90dbfa952a1

  • SSDEEP

    768:pWadwr+b2aikC6DwLUslDgXBpH/zuVQX9pzvjU4YqsABzktk42mWhlzS8q:75ikC6DwLUHfzDX9JU4YK83Az9

Malware Config

Extracted

Family

icedid

Campaign

358151332

C2

azorropulseee.fun

Targets

    • Target

      Malicious_d12cb1625386a87272359cf22ccc09c7327cbb5593a45f0ec4d9e18f19896018.exe

    • Size

      80KB

    • MD5

      a3a09bdba525dfd8e39faf805bbd0649

    • SHA1

      3f749eaf7a53fdb06e1ee6795dcf711e858154c8

    • SHA256

      d12cb1625386a87272359cf22ccc09c7327cbb5593a45f0ec4d9e18f19896018

    • SHA512

      a8d0b9b213ecca832a6cde132f2f8ee5419f40accfe47e6b38ec9c162ea17b2d64458d73e47e49e523db565c5ffbec45bbf963043f112e6cddf4e90dbfa952a1

    • SSDEEP

      768:pWadwr+b2aikC6DwLUslDgXBpH/zuVQX9pzvjU4YqsABzktk42mWhlzS8q:75ikC6DwLUHfzDX9JU4YK83Az9

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks