Overview

overview

10

Static

static

3

af7676dc80...18.dll

windows7-x64

10

af7676dc80...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    af7676dc809a385c9084b18121b56560_JaffaCakes118

  • Size

    211KB

  • Sample

    240615-vj3y6s1hpl

  • MD5

    af7676dc809a385c9084b18121b56560

  • SHA1

    5e338c4b9355c7e78639857647fa3c7af63fed49

  • SHA256

    9f8ff8da154960d17a3225675a85372e7a70aca93df8bdfb887eb22c16b4dfe3

  • SHA512

    8093abff8e988f0563fa30ac8ca0158b6bf7a870180163d2c7e7b922998714775674fc5f1e497bc82db9f7b1702905d73584bafea18c4ac80b44e859437f1f4a

  • SSDEEP

    6144:6ZLwpyyWMa3NIBkL6LDW8dTZdw702edvxiuYOO6umz4:6ZLwpyyHadIBkLIi8dTL2SvguYOO1mk

Score
10/10
icedidbankerloadertrojan

Malware Config

Extracted

Family

icedid

C2

ldrstar.casa

Targets

    • Target

      af7676dc809a385c9084b18121b56560_JaffaCakes118

    • Size

      211KB

    • MD5

      af7676dc809a385c9084b18121b56560

    • SHA1

      5e338c4b9355c7e78639857647fa3c7af63fed49

    • SHA256

      9f8ff8da154960d17a3225675a85372e7a70aca93df8bdfb887eb22c16b4dfe3

    • SHA512

      8093abff8e988f0563fa30ac8ca0158b6bf7a870180163d2c7e7b922998714775674fc5f1e497bc82db9f7b1702905d73584bafea18c4ac80b44e859437f1f4a

    • SSDEEP

      6144:6ZLwpyyWMa3NIBkL6LDW8dTZdw702edvxiuYOO6umz4:6ZLwpyyHadIBkLIi8dTL2SvguYOO1mk

    Score
    10/10
    icedidbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks