General

  • Target

    ac1d19c5942946f9eee6bc748dee032b97eb3ec3e4bb64fead3e5ac101fb1bc8

  • Size

    2.1MB

  • Sample

    240410-qlw67ahb34

  • MD5

    c52150ad226963a07cfc144d9cea73c7

  • SHA1

    235912e865829ae7b9196fc4a1df4dfe8123dcfb

  • SHA256

    ac1d19c5942946f9eee6bc748dee032b97eb3ec3e4bb64fead3e5ac101fb1bc8

  • SHA512

    43ae77c0e0c94e7b9525906dae115497c7dd49afabccd64d37b224e75931b09bff8dedf81a9cd3bf9454f75e4a67c4355f19dd8bcbe25b8b06eee32f2240a7cc

  • SSDEEP

    49152:4A+mRbl3mPEjZw3ZwaehC6CJCRp8Bk0uIW9S+OC/tq3UIzfKWBDtntSS2Sw9RxsE:4ALbl3mPtSR9bD

Malware Config

Extracted

Family

icedid

Campaign

2352744503

C2

rivertimad.com

Targets

    • Target

      ac1d19c5942946f9eee6bc748dee032b97eb3ec3e4bb64fead3e5ac101fb1bc8

    • Size

      2.1MB

    • MD5

      c52150ad226963a07cfc144d9cea73c7

    • SHA1

      235912e865829ae7b9196fc4a1df4dfe8123dcfb

    • SHA256

      ac1d19c5942946f9eee6bc748dee032b97eb3ec3e4bb64fead3e5ac101fb1bc8

    • SHA512

      43ae77c0e0c94e7b9525906dae115497c7dd49afabccd64d37b224e75931b09bff8dedf81a9cd3bf9454f75e4a67c4355f19dd8bcbe25b8b06eee32f2240a7cc

    • SSDEEP

      49152:4A+mRbl3mPEjZw3ZwaehC6CJCRp8Bk0uIW9S+OC/tq3UIzfKWBDtntSS2Sw9RxsE:4ALbl3mPtSR9bD

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Enterprise v15

Tasks