Resubmissions

28-09-2024 07:53

240928-jq4cqsvcmm 10

28-09-2024 07:50

240928-jpeyravbmp 3

28-09-2024 07:38

240928-jggglstfpm 3

General

  • Target

    level

  • Size

    789KB

  • Sample

    240928-jq4cqsvcmm

  • MD5

    4b393812c9241e1c77eef7c09ce1e1d9

  • SHA1

    6139ef7bb6c9b0b48bedd755917e7944483e54c4

  • SHA256

    9814a8f9f29e6efb4a7896f61ced334cc5567c3aa61a66325eca76360f1226b4

  • SHA512

    a55206bf2df1ee322bbede2dd738fb67f2672398cc4289c5a5a63c76105dabf9633c9126d72a65110ff8a1cda7210371ead704d8027c7bd13ebc5078811ea508

  • SSDEEP

    6144:GhQd+ZW/3TvUCWysU2XN92nIMkS9yjygIL1ZaquKIwsjd5vRukMi/mf+0Hlqn//P:sEv9yjpIrH6BjfEkPmt+/bYujcpZ

Malware Config

Extracted

Family

icedid

Campaign

3828440134

C2

aptekoagraliy.com

Targets

    • Target

      level

    • Size

      789KB

    • MD5

      4b393812c9241e1c77eef7c09ce1e1d9

    • SHA1

      6139ef7bb6c9b0b48bedd755917e7944483e54c4

    • SHA256

      9814a8f9f29e6efb4a7896f61ced334cc5567c3aa61a66325eca76360f1226b4

    • SHA512

      a55206bf2df1ee322bbede2dd738fb67f2672398cc4289c5a5a63c76105dabf9633c9126d72a65110ff8a1cda7210371ead704d8027c7bd13ebc5078811ea508

    • SSDEEP

      6144:GhQd+ZW/3TvUCWysU2XN92nIMkS9yjygIL1ZaquKIwsjd5vRukMi/mf+0Hlqn//P:sEv9yjpIrH6BjfEkPmt+/bYujcpZ

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks