General

  • Target

    cb007f57fb0d428f336b6c8bc3967c48bfb96336adf161905fe71ee16f481f64.exe

  • Size

    158KB

  • Sample

    241128-ganw1atmfr

  • MD5

    9d6730673c23b9672ab1c32c8b6fb887

  • SHA1

    ab8312c94201779d373a25c4ab38978c8ae6bad0

  • SHA256

    cb007f57fb0d428f336b6c8bc3967c48bfb96336adf161905fe71ee16f481f64

  • SHA512

    9d95000877dd3d7c7db882ce4fcfe0ddfc479d252f3e5459d50bd5c36e9aead03f21b29124c3ef20f3cb1ae52d998d15690085006dc0c202d5ce58ce6dec442d

  • SSDEEP

    3072:FwZDE3irQ+r+4rLczkGq9n7zCXCdFMYNzomk+pt79s2j:firQ+r+2aTq9CyYYNzoN2j

Malware Config

Extracted

Family

icedid

Botnet

81538452

C2

garrozalibbo.click

disponfirules.top

mislinororv.top

twistcolseza.top

Attributes
  • auth_var

    8

  • url_path

    /news/

Targets

    • Target

      cb007f57fb0d428f336b6c8bc3967c48bfb96336adf161905fe71ee16f481f64.exe

    • Size

      158KB

    • MD5

      9d6730673c23b9672ab1c32c8b6fb887

    • SHA1

      ab8312c94201779d373a25c4ab38978c8ae6bad0

    • SHA256

      cb007f57fb0d428f336b6c8bc3967c48bfb96336adf161905fe71ee16f481f64

    • SHA512

      9d95000877dd3d7c7db882ce4fcfe0ddfc479d252f3e5459d50bd5c36e9aead03f21b29124c3ef20f3cb1ae52d998d15690085006dc0c202d5ce58ce6dec442d

    • SSDEEP

      3072:FwZDE3irQ+r+4rLczkGq9n7zCXCdFMYNzomk+pt79s2j:firQ+r+2aTq9CyYYNzoN2j

MITRE ATT&CK Matrix

Tasks