General

  • Target

    cbd6b1ec0c58c081d270a546a2e12526

  • Size

    31KB

  • Sample

    240315-tjwdnacf6t

  • MD5

    cbd6b1ec0c58c081d270a546a2e12526

  • SHA1

    1061c9058f1b9feefc460aaf1364d010cd0e21f6

  • SHA256

    98202a36294325c6c23d623ebcf4e2008cc2b8ff0cd8ae4a64f7e632569d05d3

  • SHA512

    2c6be10e3afed0faf9083f25acef9568cfe14ee95b7c1ce8ee2b2bfc38cb3b8c069c216a223a425f2549f5d72e1eb4ed5e512589d3094b63b821002aa5b4ff0d

  • SSDEEP

    384:gp+zb+B/pcNY3DVg27xxObguH1a+UdMBquiwHsu+H:gp+zidp0YDVgYxMguHZBqFwHsnH

Malware Config

Extracted

Family

icedid

Botnet

1525646893

C2

survoning.top

engivesci.top

kastfiron.top

oscanonamik.buzz

Attributes
  • auth_var

    14

  • url_path

    /news/

Targets

    • Target

      cbd6b1ec0c58c081d270a546a2e12526

    • Size

      31KB

    • MD5

      cbd6b1ec0c58c081d270a546a2e12526

    • SHA1

      1061c9058f1b9feefc460aaf1364d010cd0e21f6

    • SHA256

      98202a36294325c6c23d623ebcf4e2008cc2b8ff0cd8ae4a64f7e632569d05d3

    • SHA512

      2c6be10e3afed0faf9083f25acef9568cfe14ee95b7c1ce8ee2b2bfc38cb3b8c069c216a223a425f2549f5d72e1eb4ed5e512589d3094b63b821002aa5b4ff0d

    • SSDEEP

      384:gp+zb+B/pcNY3DVg27xxObguH1a+UdMBquiwHsu+H:gp+zidp0YDVgYxMguHZBqFwHsnH

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks