General

  • Target

    89543cee712497575d6bece07fe87584_JaffaCakes118

  • Size

    429KB

  • Sample

    240601-er3qdaaa94

  • MD5

    89543cee712497575d6bece07fe87584

  • SHA1

    06daf697bb24d67fabff710ad530eddd4919c3c8

  • SHA256

    c53e0f2ba4d0ff61ed41d31cb5671c96ba8a98afbf32f1e76cd88e5061c20370

  • SHA512

    0799b91b4e63c07d76bb72e2d5cd7be8e94a1eda715ebf9b5728ab4b7bee6b02519804c957838e370e7a930862a448a03558dfb02077ccac042dcace8c3e986c

  • SSDEEP

    6144:XuqYiSlVngSzGfmQ3E13fUYHZaV9CDCOn/vZa0Vap7jxc:RYnlxgeG+Q3s89CD9vZa0Qppc

Malware Config

Extracted

Family

icedid

C2

ldrphound.casa

Targets

    • Target

      89543cee712497575d6bece07fe87584_JaffaCakes118

    • Size

      429KB

    • MD5

      89543cee712497575d6bece07fe87584

    • SHA1

      06daf697bb24d67fabff710ad530eddd4919c3c8

    • SHA256

      c53e0f2ba4d0ff61ed41d31cb5671c96ba8a98afbf32f1e76cd88e5061c20370

    • SHA512

      0799b91b4e63c07d76bb72e2d5cd7be8e94a1eda715ebf9b5728ab4b7bee6b02519804c957838e370e7a930862a448a03558dfb02077ccac042dcace8c3e986c

    • SSDEEP

      6144:XuqYiSlVngSzGfmQ3E13fUYHZaV9CDCOn/vZa0Vap7jxc:RYnlxgeG+Q3s89CD9vZa0Qppc

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks