General

  • Target

    b7adba4e4d3790c77c477dbe7c757b9c5af74afb8d2a9885c6d845387e820130

  • Size

    180KB

  • Sample

    240902-dg1mla1clb

  • MD5

    18b4eea323a14205397d17429ed1b7e5

  • SHA1

    80bb7fddc3fa0baf4650edf984cd42c159b8d34c

  • SHA256

    b7adba4e4d3790c77c477dbe7c757b9c5af74afb8d2a9885c6d845387e820130

  • SHA512

    030f83d41d7f98477b709c038effd60f8448560d76fd7d441eea9954d6b4ea37788a0e13fcd12665a0958f5037aba2676d8f350528b0c8ca6162e64061571b69

  • SSDEEP

    3072:aCDZ3U6U9IXYZM+4P2vOP5w+hrEI0TmCsb:aCDZ3OCZMOprWQ

Malware Config

Extracted

Family

icedid

C2

loadlisboa.casa

Targets

    • Target

      b7adba4e4d3790c77c477dbe7c757b9c5af74afb8d2a9885c6d845387e820130

    • Size

      180KB

    • MD5

      18b4eea323a14205397d17429ed1b7e5

    • SHA1

      80bb7fddc3fa0baf4650edf984cd42c159b8d34c

    • SHA256

      b7adba4e4d3790c77c477dbe7c757b9c5af74afb8d2a9885c6d845387e820130

    • SHA512

      030f83d41d7f98477b709c038effd60f8448560d76fd7d441eea9954d6b4ea37788a0e13fcd12665a0958f5037aba2676d8f350528b0c8ca6162e64061571b69

    • SSDEEP

      3072:aCDZ3U6U9IXYZM+4P2vOP5w+hrEI0TmCsb:aCDZ3OCZMOprWQ

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

    • Blocklisted process makes network request

MITRE ATT&CK Enterprise v15

Tasks