Resubmissions

05/02/2024, 11:12

240205-na8dzagdbq10

05/02/2024, 11:04

240205-m6lpeaebc93

General

  • Target
    inv.iso
  • Size 526KB
  • Sample240205-na8dzagdbq
  • SHA256 71b5dc8fec75d1efb17f4738129efd2b47fef5c3442d3993239c0ac8c29d533c
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • icedid

Campaign
  • 2745070743

C2
  • cootembrast.com

Targets

    • Target
      inv.iso
    • Size 526KB
    • SHA256 71b5dc8fec75d1efb17f4738129efd2b47fef5c3442d3993239c0ac8c29d533c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      out.iso
    • Size 526KB
    • SHA256 71b5dc8fec75d1efb17f4738129efd2b47fef5c3442d3993239c0ac8c29d533c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Unpaid_order-.lnk
    • Size 1KB
    • SHA256 d9a8ff6e4302ed79d0e6c9bafb7e4adf7ff9b30ae6fedbffadb5061f6642658d
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      also/by.gif
    • Size 36KB
    • SHA256 9cff2120eaada1e3f78dedc8441dd521374bde472df998ed533793d6b9f45cf7
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      also/get.txt
    • Size 242KB
    • SHA256 b8aaf33cb48aa39a41700384f9dee291ceadfed830bed67dca7488f558a23957
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      also/like.dat
    • Size 102KB
    • SHA256 1c66b9a445e00b352652452d5a328a9290f295f59d5047c31d9e79afbc73a340
    • MD5 SHA1 SHA512 SSDEEP
    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • Target
      also/on.gif
    • Size 30KB
    • SHA256 4fb89bdfe31b76ef1862a4a75b62227f7a25b505610b6455f56425b1ddf6d5b7
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      also/there.gif
    • Size 19KB
    • SHA256 9b10ddd47a7b1d4bfe0c59cd040b4cec491f54dc4803ed8a5ae1a1fb6fc84d69
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      also/what.gif
    • Size 28KB
    • SHA256 e66882ebcfd63a958d1c1d09eae886b7985a0161acea748e7336822eebc2d7d6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      also/worker.cmd
    • Size 37B
    • SHA256 7807d8a39d8eff1f69a77220ac2105a5149c19fb5d0a8673f3cf1e127b7b43ee
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      also/worker.js
    • Size 596B
    • SHA256 f86e32aa7f4792678a29f9cebee103afc9461991a6e49580263c7620295b1928
    • MD5 SHA1 SHA512
    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks