Packet analysis using Network Miner

Cold as Ice: Unit 42 Wireshark Quiz for IcedID

Everyone loves a Packet analysis challenge, eh?

The internet is an immense universe filled with a wealth of knowledge and resources waiting to be explored. Like a vast library, it holds the answers to countless questions, the keys to various interests, and the solutions to numerous problems. The catch? You need to know where to look.

I found a couple of interesting resources which were useful for this challenge :

http://malware-traffic-analysis.net/

GitHub — thongsia/Public-Pcaps

Cold as Ice: Unit 42 Wireshark Quiz for IcedID (paloaltonetworks.com)

Specifically for this exercise, we will be deep diving into the Unit42’s Wireshark quiz for IceID.

IcedID Malware

A Deep dive analysis from the ANY.RUN team:

IcedID Malware Analysis, Overview by ANY.RUN

MITRE Techniques:

IcedID, Software S0483 | MITRE ATT&CK®

Scenario:

Analysis using Network Miner