General

  • Target

    b2f613eeb08b96f3e09bc95fb26eccac8327ff3f9f3db14dcf3d51d62c58475a

  • Size

    95KB

  • Sample

    240910-bq33zazemk

  • MD5

    03ae7d0aaf88b66661a4ea4a560aae4c

  • SHA1

    b3038f180ad2b831ed2d7190d8ff6a8402f5afd9

  • SHA256

    b2f613eeb08b96f3e09bc95fb26eccac8327ff3f9f3db14dcf3d51d62c58475a

  • SHA512

    ffa9f3e03dd2040e5b1a67286ad9a16a7d6287c977f3540c9896a99bec7628b620fe4c7b0b8277b75371de394441ab454b79cc3742ddfea52d15ea4510b3bcf6

  • SSDEEP

    1536:CY53MNyZS2TinPvX+3pBn9EYm3lHMyYoTivfSN:x530ysqinXU39E/3lRA6N

Malware Config

Extracted

Family

icedid

Campaign

4213125251

C2

asforthemines99.uno

Targets

    • Target

      b2f613eeb08b96f3e09bc95fb26eccac8327ff3f9f3db14dcf3d51d62c58475a

    • Size

      95KB

    • MD5

      03ae7d0aaf88b66661a4ea4a560aae4c

    • SHA1

      b3038f180ad2b831ed2d7190d8ff6a8402f5afd9

    • SHA256

      b2f613eeb08b96f3e09bc95fb26eccac8327ff3f9f3db14dcf3d51d62c58475a

    • SHA512

      ffa9f3e03dd2040e5b1a67286ad9a16a7d6287c977f3540c9896a99bec7628b620fe4c7b0b8277b75371de394441ab454b79cc3742ddfea52d15ea4510b3bcf6

    • SSDEEP

      1536:CY53MNyZS2TinPvX+3pBn9EYm3lHMyYoTivfSN:x530ysqinXU39E/3lRA6N

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks