General

  • Target

    7842245d79fd9098b32e0897ad5f2128_JaffaCakes118

  • Size

    429KB

  • Sample

    240527-hnnzlace34

  • MD5

    7842245d79fd9098b32e0897ad5f2128

  • SHA1

    6e9d24d1a3f72432e13b1e4aa60c2619018cfe4d

  • SHA256

    d4daab6448cab62e16091169f451e9b455a3607df6ceabccdd0610473d419a6c

  • SHA512

    dbbfb8b3f736af2e7a95c2a67bf03c9d07d7382f4e3ed52137018b2f1526d17f3a42a2fbcc707159828f02afd4ed9ab7bfc1a72c7b8159943b2110ee841b3550

  • SSDEEP

    6144:XuqziSlVngSzGfmQ3E13fUYHZaV9CDCOn/vZa0Vap7jx:RznlxgeG+Q3s89CD9vZa0Qpp

Malware Config

Extracted

Family

icedid

C2

ldrphound.casa

Targets

    • Target

      7842245d79fd9098b32e0897ad5f2128_JaffaCakes118

    • Size

      429KB

    • MD5

      7842245d79fd9098b32e0897ad5f2128

    • SHA1

      6e9d24d1a3f72432e13b1e4aa60c2619018cfe4d

    • SHA256

      d4daab6448cab62e16091169f451e9b455a3607df6ceabccdd0610473d419a6c

    • SHA512

      dbbfb8b3f736af2e7a95c2a67bf03c9d07d7382f4e3ed52137018b2f1526d17f3a42a2fbcc707159828f02afd4ed9ab7bfc1a72c7b8159943b2110ee841b3550

    • SSDEEP

      6144:XuqziSlVngSzGfmQ3E13fUYHZaV9CDCOn/vZa0Vap7jx:RznlxgeG+Q3s89CD9vZa0Qpp

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks