Overview

overview

10

Static

static

3

8640a5f8e0...18.dll

windows7-x64

10

8640a5f8e0...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8640a5f8e0a61fb9908e48ebd0084ebc_JaffaCakes118

  • Size

    214KB

  • Sample

    240531-hn3gzsbd23

  • MD5

    8640a5f8e0a61fb9908e48ebd0084ebc

  • SHA1

    5222e4b1507008ee4a58cabf9d5d42da84be825c

  • SHA256

    19995a1dd05fd6d0479ccd9f268bf713a4e7d873a7c68c368343e59dd7b7cad6

  • SHA512

    06dde8e24f006b55532e31faac8daaf7ac8c968934101c6c304183dfd6f1c3122889c75c8389def4cc6669e034f01aac87b9315b5699e58dde65d8f61df47376

  • SSDEEP

    6144:54+U6Ou0hTIXJnxeecA9ikbl4yB6ETGzM0y:a+U6Oleh9cA/lV6ETGw0y

Score
10/10
icedidbankerloadertrojan

Malware Config

Extracted

Family

icedid

C2

ldrshekel.casa

Targets

    • Target

      8640a5f8e0a61fb9908e48ebd0084ebc_JaffaCakes118

    • Size

      214KB

    • MD5

      8640a5f8e0a61fb9908e48ebd0084ebc

    • SHA1

      5222e4b1507008ee4a58cabf9d5d42da84be825c

    • SHA256

      19995a1dd05fd6d0479ccd9f268bf713a4e7d873a7c68c368343e59dd7b7cad6

    • SHA512

      06dde8e24f006b55532e31faac8daaf7ac8c968934101c6c304183dfd6f1c3122889c75c8389def4cc6669e034f01aac87b9315b5699e58dde65d8f61df47376

    • SSDEEP

      6144:54+U6Ou0hTIXJnxeecA9ikbl4yB6ETGzM0y:a+U6Oleh9cA/lV6ETGw0y

    Score
    10/10
    icedidbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks