General

  • Target

    916307ce4ebea24b21ae216704faffe1

  • Size

    37KB

  • Sample

    240205-h9vdhaaeb5

  • MD5

    916307ce4ebea24b21ae216704faffe1

  • SHA1

    2a15f36b0d917a5523fb16ba66a46a7bbf943727

  • SHA256

    98d77d5ebadd29668219ba6b6fa9b5df78f7a56dc0721e1e03349248527d740f

  • SHA512

    66f2583aae927dd396d514507e019b0b213de92baa957299ff5e1ed53016ea7e60c5aeb1b315dcef82fe926d8dc321fb9402736ee60b3f51475a9f8d0587adb0

  • SSDEEP

    768:jN2tSDk4s1dmpiTD5w9CwGiBkHsmiKIyxHO6/UvHACqrn8V6HvX:DDk4s1dWiJwswbkH2VyFO6/Bn8V6Hv

Malware Config

Extracted

Family

icedid

Campaign

3103751915

C2

immotransfer.top

Targets

    • Target

      916307ce4ebea24b21ae216704faffe1

    • Size

      37KB

    • MD5

      916307ce4ebea24b21ae216704faffe1

    • SHA1

      2a15f36b0d917a5523fb16ba66a46a7bbf943727

    • SHA256

      98d77d5ebadd29668219ba6b6fa9b5df78f7a56dc0721e1e03349248527d740f

    • SHA512

      66f2583aae927dd396d514507e019b0b213de92baa957299ff5e1ed53016ea7e60c5aeb1b315dcef82fe926d8dc321fb9402736ee60b3f51475a9f8d0587adb0

    • SSDEEP

      768:jN2tSDk4s1dmpiTD5w9CwGiBkHsmiKIyxHO6/UvHACqrn8V6HvX:DDk4s1dWiJwswbkH2VyFO6/Bn8V6Hv

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks