Overview

overview

10

Static

static

7

191f0a5dd7...18.dll

windows7-x64

10

191f0a5dd7...18.dll

windows10-2004-x64

10

Resubmissions

28-06-2024 11:41

240628-ntldjszgmq 10

28-06-2024 06:30

240628-g9vtlayblr 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    191f0a5dd7622595d3d38decf8061c05_JaffaCakes118

  • Size

    3.0MB

  • Sample

    240628-g9vtlayblr

  • MD5

    191f0a5dd7622595d3d38decf8061c05

  • SHA1

    bded0a27fd4b759642720f8fbd4470a168f75576

  • SHA256

    e7636efbaf3e170af8f7cbc36f4c030f3df0bc89547186ddfe03e66a5c8c0b92

  • SHA512

    a1d2f5b4055c705f4e6f0394ff8b10127c8802d96e87722a34a6eaa0968d34853a9279de497d837c8b45c439e763bb2a65f4207c7e9db1a1165cbc99c96fa952

  • SSDEEP

    49152:EBKs6yFyQqn4ZvgZ3aj+wvLoK/DVcONC/LzUX0QrxwyrIrP1VRmmnsQYp:EB36Sy94y3ajroKbCDoWPRT

Score
10/10
icedid3744237144bankerloadertrojanvmprotect

Malware Config

Extracted

Family

icedid

Campaign

3744237144

C2

hommyfloppy.best

Targets

    • Target

      191f0a5dd7622595d3d38decf8061c05_JaffaCakes118

    • Size

      3.0MB

    • MD5

      191f0a5dd7622595d3d38decf8061c05

    • SHA1

      bded0a27fd4b759642720f8fbd4470a168f75576

    • SHA256

      e7636efbaf3e170af8f7cbc36f4c030f3df0bc89547186ddfe03e66a5c8c0b92

    • SHA512

      a1d2f5b4055c705f4e6f0394ff8b10127c8802d96e87722a34a6eaa0968d34853a9279de497d837c8b45c439e763bb2a65f4207c7e9db1a1165cbc99c96fa952

    • SSDEEP

      49152:EBKs6yFyQqn4ZvgZ3aj+wvLoK/DVcONC/LzUX0QrxwyrIrP1VRmmnsQYp:EB36Sy94y3ajroKbCDoWPRT

    Score
    10/10
    icedid3744237144bankerloadertrojanvmprotect

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks