General

  • Target

    d6e4febd633072906a372964f1edfc3e

  • Size

    294KB

  • Sample

    240319-xthr4ace35

  • MD5

    d6e4febd633072906a372964f1edfc3e

  • SHA1

    97b0c16c9a198606999c2738260298e8115cf030

  • SHA256

    dbb9aed0ff425ff5c162cb0518565878ca08e2a58f059bcf47a15da6d560a63b

  • SHA512

    7b4b3a512cb13efea4274b2c77bd207ba5a5d59895c9cc027a86dfb4e3bb6eebc5eea9f5f5a56c65570d922d41f9410c041a03df3e2323e75703a7a1f186a528

  • SSDEEP

    3072:7nm/lcz0nUFsV9MZ/5Mdjr85R78dnrD6KM69pzy3nJVV0GS4NXfXyWDotUKrK:Tz0nUFsV6Z/2ZwR7chpCJV/iSarK

Malware Config

Extracted

Family

icedid

Campaign

3008954407

C2

zasertolofolom.top

Targets

    • Target

      d6e4febd633072906a372964f1edfc3e

    • Size

      294KB

    • MD5

      d6e4febd633072906a372964f1edfc3e

    • SHA1

      97b0c16c9a198606999c2738260298e8115cf030

    • SHA256

      dbb9aed0ff425ff5c162cb0518565878ca08e2a58f059bcf47a15da6d560a63b

    • SHA512

      7b4b3a512cb13efea4274b2c77bd207ba5a5d59895c9cc027a86dfb4e3bb6eebc5eea9f5f5a56c65570d922d41f9410c041a03df3e2323e75703a7a1f186a528

    • SSDEEP

      3072:7nm/lcz0nUFsV9MZ/5Mdjr85R78dnrD6KM69pzy3nJVV0GS4NXfXyWDotUKrK:Tz0nUFsV6Z/2ZwR7chpCJV/iSarK

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks