General

  • Target

    b055bc5918d93625b5c13562e5e3b424_JaffaCakes118

  • Size

    120KB

  • Sample

    240615-11hbpawepa

  • MD5

    b055bc5918d93625b5c13562e5e3b424

  • SHA1

    a13a347668ee77ae34d8f903f61988e17e82b68e

  • SHA256

    0d3a18ae0018427bbf053669e07bcc3cd9bc248b04a6dd0c082694d20818b56c

  • SHA512

    22036de96a6611ea7db705629f7ff519963fc950456a0a3cc99280adbf76f03846c568565ec8e3edf8bd736e4c53c75ca83abbc84491411b0ccb8d8ee4abe375

  • SSDEEP

    3072:za+dUDMZJjkzSzh25YohAUwr3XnsOOujmZOtl:wMZSzSzhA1rwDXnhZCSl

Malware Config

Extracted

Family

icedid

C2

loadwe4.casa

Targets

    • Target

      b055bc5918d93625b5c13562e5e3b424_JaffaCakes118

    • Size

      120KB

    • MD5

      b055bc5918d93625b5c13562e5e3b424

    • SHA1

      a13a347668ee77ae34d8f903f61988e17e82b68e

    • SHA256

      0d3a18ae0018427bbf053669e07bcc3cd9bc248b04a6dd0c082694d20818b56c

    • SHA512

      22036de96a6611ea7db705629f7ff519963fc950456a0a3cc99280adbf76f03846c568565ec8e3edf8bd736e4c53c75ca83abbc84491411b0ccb8d8ee4abe375

    • SSDEEP

      3072:za+dUDMZJjkzSzh25YohAUwr3XnsOOujmZOtl:wMZSzSzhA1rwDXnhZCSl

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks