Overview

overview

10

Static

static

3

198895bd9f...18.dll

windows7-x64

10

198895bd9f...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    198895bd9f49e2dc78c0f82420bb6f87_JaffaCakes118

  • Size

    211KB

  • Sample

    240505-2n5f5agc91

  • MD5

    198895bd9f49e2dc78c0f82420bb6f87

  • SHA1

    f6c2077832d52f082631fe8e3efabef6c329a8a0

  • SHA256

    a95efda438fdee4b4866287c2cfe9d89772a46c5d9d22377c8c63e43b2c93295

  • SHA512

    2d365edfc61ed9610ad7caa9a82be757339214e91508e89a156ce118170a552291881c4527a22a397214c35839b2a12c04b20404274cc8624bf54308dc01d574

  • SSDEEP

    6144:6ZLweyyWMa3NIBkL6LDW8dTZdw702edvxiuYOO6umz4:6ZLweyyHadIBkLIi8dTL2SvguYOO1mk

Score
10/10
icedidbankerloadertrojan

Malware Config

Extracted

Family

icedid

C2

ldrstar.casa

Targets

    • Target

      198895bd9f49e2dc78c0f82420bb6f87_JaffaCakes118

    • Size

      211KB

    • MD5

      198895bd9f49e2dc78c0f82420bb6f87

    • SHA1

      f6c2077832d52f082631fe8e3efabef6c329a8a0

    • SHA256

      a95efda438fdee4b4866287c2cfe9d89772a46c5d9d22377c8c63e43b2c93295

    • SHA512

      2d365edfc61ed9610ad7caa9a82be757339214e91508e89a156ce118170a552291881c4527a22a397214c35839b2a12c04b20404274cc8624bf54308dc01d574

    • SSDEEP

      6144:6ZLweyyWMa3NIBkL6LDW8dTZdw702edvxiuYOO6umz4:6ZLweyyHadIBkLIi8dTL2SvguYOO1mk

    Score
    10/10
    icedidbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks