General

  • Target

    572cddb5a288e43a31db5524d2f8d3f5a03d373135c6bd961c70aa86d815d1c0

  • Size

    95KB

  • Sample

    240909-1nmewatfkf

  • MD5

    859068213ae03c00169275d3dee62233

  • SHA1

    cfffa0d710705d8821e7a7d711cd99ad561d7c20

  • SHA256

    572cddb5a288e43a31db5524d2f8d3f5a03d373135c6bd961c70aa86d815d1c0

  • SHA512

    a85dcd75fbea3fd2c134e0d05d4f8b6213f6f03633bb1040c2bf8dcbb0e407b2d9366419a60f33111e15a7f7fd3607e498bd7d2730dd1027f5aab5a0b65b51ea

  • SSDEEP

    1536:CY53MNyZS2TinPvX+3pBn9EYm3lHMyYoTivfs:x530ysqinXU39E/3lRAk

Malware Config

Extracted

Family

icedid

Campaign

4213125251

C2

asforthemines99.uno

Targets

    • Target

      572cddb5a288e43a31db5524d2f8d3f5a03d373135c6bd961c70aa86d815d1c0

    • Size

      95KB

    • MD5

      859068213ae03c00169275d3dee62233

    • SHA1

      cfffa0d710705d8821e7a7d711cd99ad561d7c20

    • SHA256

      572cddb5a288e43a31db5524d2f8d3f5a03d373135c6bd961c70aa86d815d1c0

    • SHA512

      a85dcd75fbea3fd2c134e0d05d4f8b6213f6f03633bb1040c2bf8dcbb0e407b2d9366419a60f33111e15a7f7fd3607e498bd7d2730dd1027f5aab5a0b65b51ea

    • SSDEEP

      1536:CY53MNyZS2TinPvX+3pBn9EYm3lHMyYoTivfs:x530ysqinXU39E/3lRAk

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks