General

  • Target

    IcedID.zip

  • Size

    26KB

  • Sample

    240416-v8lfeshh4s

  • MD5

    29588684f0320748e56d0817caea172e

  • SHA1

    ca502062d1f3395bbb9b29dc5faf020cd445b2f9

  • SHA256

    382e2d490717e2e314f3abc2d04ce6e8644ddf262878bf71fce50caeaeb1036e

  • SHA512

    d12ceb68abbddc5fc398fd48ffe31ff90dce074252cbe8f7a344f07e2e902a9f9f15071621d16fa0414bd90575eb4e1c21dc9d49d44d57e0e8beb9eb609c5337

  • SSDEEP

    768:AWXLHXDp1Bx1kKSsDOEu9ASdDjixCVYDmxInwfiOLnwbznO:A0dq9HbYKIYiOcbznO

Malware Config

Extracted

Family

icedid

Campaign

380132461

C2

revedanstvy.bid

Targets

    • Target

      33cc3816f98fa22354559711326a5ce1352d819c180be4328a72618d20a78632.exe

    • Size

      62KB

    • MD5

      3ddeea156606b2e5d19c86cedf3dec30

    • SHA1

      df75313a6c6af17bcfbaa55a693314b34cf97c1e

    • SHA256

      33cc3816f98fa22354559711326a5ce1352d819c180be4328a72618d20a78632

    • SHA512

      dc237628a739c6eda902a505cc7e547dd4d6a2c655685eb2bc495dfbc6555063af13a0425f92936c9ffda5ba050c37859c4431da07d663151bb721010712cf8d

    • SSDEEP

      768:2qLODVjNPDZUEix9i3Mb/pvj5ZzbQJbTfHUdV8VTkj7DjpqZMRQ:2DDVjqx9RZjvbQJPfEA4/DEZMRQ

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks