General

  • Target

    b8bafa2b1ba6c39a52fd748636be465f

  • Size

    294KB

  • Sample

    240307-pm36fsba39

  • MD5

    b8bafa2b1ba6c39a52fd748636be465f

  • SHA1

    d90ada82bfdf81d30eed9b1d4102acaed345c907

  • SHA256

    1ba3dae484f0f97e600a5bfeddd6cac41b17b717a0e776c34622450d8372d5a5

  • SHA512

    4cc124d9630cca5d27d15ab113bc93eb4b9625a7ab0de1f8a1d6923797cb4309a89d04804e8f0bfd514479700e07545a509f1b3114807b9cb77c3e57c92829ba

  • SSDEEP

    3072:7nm/lcz0nUFsV9MZ/5Mdjr85R78dnrD6KM69pzy3nJVV0GS4NXfXyWDotUKr3:Tz0nUFsV6Z/2ZwR7chpCJV/iSar3

Malware Config

Extracted

Family

icedid

Campaign

3008954407

C2

zasertolofolom.top

Targets

    • Target

      b8bafa2b1ba6c39a52fd748636be465f

    • Size

      294KB

    • MD5

      b8bafa2b1ba6c39a52fd748636be465f

    • SHA1

      d90ada82bfdf81d30eed9b1d4102acaed345c907

    • SHA256

      1ba3dae484f0f97e600a5bfeddd6cac41b17b717a0e776c34622450d8372d5a5

    • SHA512

      4cc124d9630cca5d27d15ab113bc93eb4b9625a7ab0de1f8a1d6923797cb4309a89d04804e8f0bfd514479700e07545a509f1b3114807b9cb77c3e57c92829ba

    • SSDEEP

      3072:7nm/lcz0nUFsV9MZ/5Mdjr85R78dnrD6KM69pzy3nJVV0GS4NXfXyWDotUKr3:Tz0nUFsV6Z/2ZwR7chpCJV/iSar3

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks