Resubmissions

19-08-2024 05:25

240819-f4rpbawfne 10

General

  • Target

    6302f08805736a80b939c7b4e226bc7c0201c8ea567f0aaa5ac058c87c6c829f_cadb54c7e091da0edba5869737fa16250131b0ffe3bb50394e51d26db1aa36a6.exe

  • Size

    673KB

  • Sample

    240819-f4rpbawfne

  • MD5

    f13677c7f6ba484dddf7c5a5bc4739de

  • SHA1

    9c1766092238a591f3600bdf249ab2f7eb5f6c85

  • SHA256

    cadb54c7e091da0edba5869737fa16250131b0ffe3bb50394e51d26db1aa36a6

  • SHA512

    bd97b7909fd431496f694f7941334603bac7988ffabb2082f4974e53116a66e7ccfaf634b69865ac0446ec87139e3ffc49aeb6d1ed0c30718fa251814f81e2d5

  • SSDEEP

    12288:xozmUG1wwQS2ijcSBC6nTSYkFzGC9055EnY/WAlibW4pBMLbN9vbu42oGHvAPIdb:xZUkQ5CTSYkFX9o5EnWllibZpBMvN5bY

Malware Config

Extracted

Family

icedid

Campaign

1060798742

C2

carismorth.com

Targets

    • Target

      6302f08805736a80b939c7b4e226bc7c0201c8ea567f0aaa5ac058c87c6c829f_cadb54c7e091da0edba5869737fa16250131b0ffe3bb50394e51d26db1aa36a6.exe

    • Size

      673KB

    • MD5

      f13677c7f6ba484dddf7c5a5bc4739de

    • SHA1

      9c1766092238a591f3600bdf249ab2f7eb5f6c85

    • SHA256

      cadb54c7e091da0edba5869737fa16250131b0ffe3bb50394e51d26db1aa36a6

    • SHA512

      bd97b7909fd431496f694f7941334603bac7988ffabb2082f4974e53116a66e7ccfaf634b69865ac0446ec87139e3ffc49aeb6d1ed0c30718fa251814f81e2d5

    • SSDEEP

      12288:xozmUG1wwQS2ijcSBC6nTSYkFzGC9055EnY/WAlibW4pBMLbN9vbu42oGHvAPIdb:xZUkQ5CTSYkFX9o5EnWllibZpBMvN5bY

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks