General

  • Target

    84d396a414249a6fd3395c688650299c

  • Size

    23KB

  • Sample

    240131-ta6s2affh4

  • MD5

    84d396a414249a6fd3395c688650299c

  • SHA1

    4059c323b2bc5f6dd80b214b3c0698f51c058269

  • SHA256

    c63d811fc4177fa02e676428095b4576b6980129430a1658b2827c56d1f87c69

  • SHA512

    21de4182acc0c249d1537eb6147d8069b52d9ef816c2443d46718da8b70d7aa299fa5e6466aa7330f97db2092c9d8c67563d48443f8021f6f6858f21c25559cc

  • SSDEEP

    384:OHl9TYxY2jqZGtsKSTa5noCfLeWDBq9lnIkzEaCaFhWcuJ303WlaJHGLTiwxW5qo:OF6jqZGtsK0qJfLeIqFPFhW63GaJHGdu

Malware Config

Extracted

Family

icedid

Campaign

329799604

C2

zodiakko.cyou

Targets

    • Target

      osd.dll

    • Size

      50KB

    • MD5

      fb0603f9310cc230f10f3be3ba6a30f8

    • SHA1

      2c9cd89b6221909419634bb767d0f9d05c3f740c

    • SHA256

      27e77f6b988fce2908ad124d20c2d7c7256013bdfe0b65d22ae0b18247f56377

    • SHA512

      f66105895c52d2f6047a64bceab28d35708cd4f6bc89033f2dc8876903e8835f7af22e2fe605665e663fb51caba3f92b845abc20fd1e938163c06e9f6ba558ed

    • SSDEEP

      1536:YYY9AxsXc4XezkE1/bjGFDsH2yvBW/HS1/xRQp7:YN9bXc4Xezk6//GFDsH2yvBW/HU/xRs7

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks