General

  • Target

    77157bac82df74cfbc5010f637893c51

  • Size

    350KB

  • Sample

    240126-l9gzyscfdm

  • MD5

    77157bac82df74cfbc5010f637893c51

  • SHA1

    02015841911b9f7e7283584d13a45c86860de91b

  • SHA256

    92eae079aa909c98c6780a8f204511cea4907dc69c7a0de7c3a49d144082053c

  • SHA512

    e28037358eb017afba882b98c03a8a19fa6b6c0a6389e0849ff958b8c2ceca2e45912fc2f0cf13483f5bad72a0d20cfeafe10630284f40f87e4db3ae56f1d8fa

  • SSDEEP

    6144:7ykxrGZmfUiMANKYPRCeX94lMgasceGPFK/RHOVcD3lE:vIcNKCRCa4lSsMUuoVE

Malware Config

Extracted

Family

icedid

Botnet

2327843322

C2

warrioruno.top

warriordos.top

Attributes
  • auth_var

    1

  • url_path

    /audio/

Extracted

Family

icedid

Targets

    • Target

      77157bac82df74cfbc5010f637893c51

    • Size

      350KB

    • MD5

      77157bac82df74cfbc5010f637893c51

    • SHA1

      02015841911b9f7e7283584d13a45c86860de91b

    • SHA256

      92eae079aa909c98c6780a8f204511cea4907dc69c7a0de7c3a49d144082053c

    • SHA512

      e28037358eb017afba882b98c03a8a19fa6b6c0a6389e0849ff958b8c2ceca2e45912fc2f0cf13483f5bad72a0d20cfeafe10630284f40f87e4db3ae56f1d8fa

    • SSDEEP

      6144:7ykxrGZmfUiMANKYPRCeX94lMgasceGPFK/RHOVcD3lE:vIcNKCRCa4lSsMUuoVE

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks