General

  • Target

    bd7077fd2ef9cea9cf0d27e3f1878bd5

  • Size

    144KB

  • Sample

    240310-c1rclaaa73

  • MD5

    bd7077fd2ef9cea9cf0d27e3f1878bd5

  • SHA1

    e35b7efbaa3cf8acc673abec88e478ec4a2e1746

  • SHA256

    f8a4cf697ec22aa21167254cf454e0cfadad087b23781b10f5c5ee7c8cd52afa

  • SHA512

    f08f2c8e8e3b8d694bf0abd81ca9e233c27fd65c294c3d9218bdab3a16da43b794099409d556858d2044e377ecdcb239ec5acd8963d448e6a49345953de489d1

  • SSDEEP

    3072:cZHM7432GIqOSvx+R5x2gzjoaRKUOfea2Vyqlcov364g65JdW0OOF:cZY4GGIBSZ8T2gZ4/WcU64bpWMF

Malware Config

Extracted

Family

icedid

Targets

    • Target

      a6275383ffec22509908a083fa77d250ef4ccde0ef488dad7818d1eceb9e2998

    • Size

      250KB

    • MD5

      5dd964b340c61f0e9d9577c2c0052084

    • SHA1

      49f9f86af31fb8853456a8faae0ea23b3d59bb71

    • SHA256

      a6275383ffec22509908a083fa77d250ef4ccde0ef488dad7818d1eceb9e2998

    • SHA512

      af2d54db1894f8e7728364abae85bbb2cc82591f21b053614f21125e2023578ed91688d0782693edbeed7f42e252207e895d0c96f96d94d22bf3d34d35c9d8a9

    • SSDEEP

      6144:EXw8LQvGT/gMbFE8i7WFxeKFu5NKHc3As2su303oR5AO35ycC:EX5UM//a84W7Du5QHc3pu303oPtYcC

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks