General

  • Target

    47c502dc2afe3a9d96722da789906378455145b8856341e8ad32a25f4084570c

  • Size

    188KB

  • Sample

    240901-1pl6hatckd

  • MD5

    fc6f359745827e8459f5ef6bb9f82d66

  • SHA1

    2af243cd19fc1575ce7d8e23def9b04c79e9a649

  • SHA256

    47c502dc2afe3a9d96722da789906378455145b8856341e8ad32a25f4084570c

  • SHA512

    fbbf6166269bf8f3d132cfb5264c385a7c07abc4c1d93f079bfe5839a89d993e11b3eddfae85ec9ebe06cd8b09b2f72cbcfaa542a5ff8a6c0e935cc13514131a

  • SSDEEP

    3072:AiyFFA003t401K/EKK0LKA7/D5N+gHPVcbW6GGix93yYDB:Ato3DAs0L1VXafix9P

Malware Config

Extracted

Family

icedid

C2

loadlisboa.casa

Targets

    • Target

      47c502dc2afe3a9d96722da789906378455145b8856341e8ad32a25f4084570c

    • Size

      188KB

    • MD5

      fc6f359745827e8459f5ef6bb9f82d66

    • SHA1

      2af243cd19fc1575ce7d8e23def9b04c79e9a649

    • SHA256

      47c502dc2afe3a9d96722da789906378455145b8856341e8ad32a25f4084570c

    • SHA512

      fbbf6166269bf8f3d132cfb5264c385a7c07abc4c1d93f079bfe5839a89d993e11b3eddfae85ec9ebe06cd8b09b2f72cbcfaa542a5ff8a6c0e935cc13514131a

    • SSDEEP

      3072:AiyFFA003t401K/EKK0LKA7/D5N+gHPVcbW6GGix93yYDB:Ato3DAs0L1VXafix9P

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

    • Blocklisted process makes network request

MITRE ATT&CK Enterprise v15

Tasks