General

  • Target

    220719-ygkxcsaha9

  • Size

    102KB

  • Sample

    240322-r5ayqscg67

  • MD5

    70ca4fdb88ee6c19ca5c2fd9ad190991

  • SHA1

    b25460176e51cbac31c3265aa812cd74c33af9f6

  • SHA256

    1c66b9a445e00b352652452d5a328a9290f295f59d5047c31d9e79afbc73a340

  • SHA512

    f89d507a417be50d9251df99e766b28036fa00f7671772645e9cd07455ed1a450a7fd6692a6d18e0cfa8bacb08c1ccc305ee60c7c97eb8a543fe4923a6535ae0

  • SSDEEP

    1536:ZpYpbLoPFd6rqUU6f5fKiPojZvHLvDIOwZs2uJsR8LbvvtdHD+K9qI2qfiY:ZQo+pKiPqLDIhv2L+Izfr

Malware Config

Extracted

Family

icedid

Campaign

2745070743

C2

cootembrast.com

Targets

    • Target

      220719-ygkxcsaha9

    • Size

      102KB

    • MD5

      70ca4fdb88ee6c19ca5c2fd9ad190991

    • SHA1

      b25460176e51cbac31c3265aa812cd74c33af9f6

    • SHA256

      1c66b9a445e00b352652452d5a328a9290f295f59d5047c31d9e79afbc73a340

    • SHA512

      f89d507a417be50d9251df99e766b28036fa00f7671772645e9cd07455ed1a450a7fd6692a6d18e0cfa8bacb08c1ccc305ee60c7c97eb8a543fe4923a6535ae0

    • SSDEEP

      1536:ZpYpbLoPFd6rqUU6f5fKiPojZvHLvDIOwZs2uJsR8LbvvtdHD+K9qI2qfiY:ZQo+pKiPqLDIhv2L+Izfr

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks