General

  • Target
    plink.dll
  • Size 198KB
  • Sample231216-efcd2sbfh6
  • SHA256 6acab64ff2901820e5d105bfbaa099f6b3a39473a5c7da444d11c5df03c6b8e7
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • icedid

Campaign
  • 2363217890

C2
  • merknegrok.me

Targets

    • Target
      plink.dll
    • Size 198KB
    • SHA256 6acab64ff2901820e5d105bfbaa099f6b3a39473a5c7da444d11c5df03c6b8e7
    • MD5 SHA1 SHA512 SSDEEP
    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • PhotoLoader Payload

      IcedID downloder-Photloader.

MITRE ATT&CK Matrix

Tasks