General

  • Target

    b9ce680718abab18162d7358dd9717276d4d77674f699aac9f7dfc3dc2e9115b

  • Size

    382KB

  • Sample

    241019-xbvc6s1gkf

  • MD5

    0ef3890b051c62c04435a5ab8cb15ec2

  • SHA1

    c810007de17fe76f2fca134d0a1003c790a616d9

  • SHA256

    b9ce680718abab18162d7358dd9717276d4d77674f699aac9f7dfc3dc2e9115b

  • SHA512

    e56f43ae5a2c19f1e5b74ab5018821257aac3a5d94daa2c656d6181d33250acfed04f48d7bd678ab946d7eb48204760cb488a24f3503919b13ea7438bd1f2bc0

  • SSDEEP

    6144:N3GXaEkS6acHhDbYIur4J4Zn4HSMz6gCz3FGIcAolpgVHMe4IuKKew8O/CTq:N4aW4uMz6DwAUOVHMe4938C

Malware Config

Extracted

Family

icedid

C2

wloppyload.top

Targets

    • Target

      b9ce680718abab18162d7358dd9717276d4d77674f699aac9f7dfc3dc2e9115b

    • Size

      382KB

    • MD5

      0ef3890b051c62c04435a5ab8cb15ec2

    • SHA1

      c810007de17fe76f2fca134d0a1003c790a616d9

    • SHA256

      b9ce680718abab18162d7358dd9717276d4d77674f699aac9f7dfc3dc2e9115b

    • SHA512

      e56f43ae5a2c19f1e5b74ab5018821257aac3a5d94daa2c656d6181d33250acfed04f48d7bd678ab946d7eb48204760cb488a24f3503919b13ea7438bd1f2bc0

    • SSDEEP

      6144:N3GXaEkS6acHhDbYIur4J4Zn4HSMz6gCz3FGIcAolpgVHMe4IuKKew8O/CTq:N4aW4uMz6DwAUOVHMe4938C

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Enterprise v15

Tasks