Overview

overview

10

Static

static

7

1d101557dc...18.dll

windows7-x64

10

1d101557dc...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1d101557dc7b95085ba874ac4bdb38dc_JaffaCakes118

  • Size

    3.0MB

  • Sample

    240702-ah6nfsydrb

  • MD5

    1d101557dc7b95085ba874ac4bdb38dc

  • SHA1

    d92e541c707cb8825860ba8f3bf801b06fb5b0c2

  • SHA256

    21249ce24600b1feac26a2a9883f3c6de299681a924be281630bc3869f0f4044

  • SHA512

    31dffd6ab386d1e6df37d9aa0333c2d16b3e154d2557bf1d8bb39ae313285ae4fc463a4ed92b8a86f39ff4a624d35dfc83c1b7567e634a96e29b47347e5d6e2f

  • SSDEEP

    49152:dqGB2KwBl+dyMzac4d12JVb4ZwDI0A3dQIOOtxE5/8ojWVVidT7gU9Y7xV:FB1wBlYykZ4L2JVkWQ3REJjWS7M7xV

Score
10/10
icedid620514333bankerloadertrojanvmprotect

Malware Config

Extracted

Family

icedid

Campaign

620514333

C2

oskolko.uno

Targets

    • Target

      1d101557dc7b95085ba874ac4bdb38dc_JaffaCakes118

    • Size

      3.0MB

    • MD5

      1d101557dc7b95085ba874ac4bdb38dc

    • SHA1

      d92e541c707cb8825860ba8f3bf801b06fb5b0c2

    • SHA256

      21249ce24600b1feac26a2a9883f3c6de299681a924be281630bc3869f0f4044

    • SHA512

      31dffd6ab386d1e6df37d9aa0333c2d16b3e154d2557bf1d8bb39ae313285ae4fc463a4ed92b8a86f39ff4a624d35dfc83c1b7567e634a96e29b47347e5d6e2f

    • SSDEEP

      49152:dqGB2KwBl+dyMzac4d12JVb4ZwDI0A3dQIOOtxE5/8ojWVVidT7gU9Y7xV:FB1wBlYykZ4L2JVkWQ3REJjWS7M7xV

    Score
    10/10
    icedid620514333bankerloadertrojanvmprotect

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks