General

  • Target

    c29dc8fc03b2dcf7df0f8d0485ccde8d5bd98dacdc1c71cd88c6d9d3da16cfba

  • Size

    180KB

  • Sample

    240902-d11fyazhkk

  • MD5

    ab2ab78db04bc342b6d68208fc78b31d

  • SHA1

    3ea0d311c1df0aa654557976d81df66217c41af8

  • SHA256

    c29dc8fc03b2dcf7df0f8d0485ccde8d5bd98dacdc1c71cd88c6d9d3da16cfba

  • SHA512

    513104413598ab9b8af695d47a2aa9ce6da9e154623bc64de0115867c6c2535ba76d9ca238e3d860d8134d18554d93a55d776523861d441fe0315749f90e54bd

  • SSDEEP

    3072:aZDZ3U6U9IXYZM+4P2vOP5w+hrEI0TmCsb:aZDZ3OCZMOprWQ

Malware Config

Extracted

Family

icedid

C2

loadlisboa.casa

Targets

    • Target

      c29dc8fc03b2dcf7df0f8d0485ccde8d5bd98dacdc1c71cd88c6d9d3da16cfba

    • Size

      180KB

    • MD5

      ab2ab78db04bc342b6d68208fc78b31d

    • SHA1

      3ea0d311c1df0aa654557976d81df66217c41af8

    • SHA256

      c29dc8fc03b2dcf7df0f8d0485ccde8d5bd98dacdc1c71cd88c6d9d3da16cfba

    • SHA512

      513104413598ab9b8af695d47a2aa9ce6da9e154623bc64de0115867c6c2535ba76d9ca238e3d860d8134d18554d93a55d776523861d441fe0315749f90e54bd

    • SSDEEP

      3072:aZDZ3U6U9IXYZM+4P2vOP5w+hrEI0TmCsb:aZDZ3OCZMOprWQ

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

    • Blocklisted process makes network request

MITRE ATT&CK Enterprise v15

Tasks