General

  • Target

    77aae234f24bd59c1d4cdd50030d445a_JaffaCakes118

  • Size

    352KB

  • Sample

    240527-daxmcsee93

  • MD5

    77aae234f24bd59c1d4cdd50030d445a

  • SHA1

    5d6d94e6cb5c51a15498a66f8d3289444875105f

  • SHA256

    eb413325acbb2ea289969e834c5237fc6376073f24674b7760d45b94dfaf8755

  • SHA512

    6e5f456cd92dd36c6f3e90b371679e64d9ddce9b6487644dfb97967eb2fa57e37c8a8707b6340f166281f03604424d789fbd8e6a7b307f865142c5bd2665474f

  • SSDEEP

    6144:RBCrWeU2NQII2PZakuVcNuvGJz7Vnr5RDsxB:RBCCeU2NQIZaT2uezBnrbsxB

Malware Config

Extracted

Family

icedid

Targets

    • Target

      77aae234f24bd59c1d4cdd50030d445a_JaffaCakes118

    • Size

      352KB

    • MD5

      77aae234f24bd59c1d4cdd50030d445a

    • SHA1

      5d6d94e6cb5c51a15498a66f8d3289444875105f

    • SHA256

      eb413325acbb2ea289969e834c5237fc6376073f24674b7760d45b94dfaf8755

    • SHA512

      6e5f456cd92dd36c6f3e90b371679e64d9ddce9b6487644dfb97967eb2fa57e37c8a8707b6340f166281f03604424d789fbd8e6a7b307f865142c5bd2665474f

    • SSDEEP

      6144:RBCrWeU2NQII2PZakuVcNuvGJz7Vnr5RDsxB:RBCCeU2NQIZaT2uezBnrbsxB

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks