Overview

overview

10

Static

static

3

04a1c81b1b...18.dll

windows7-x64

10

04a1c81b1b...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    04a1c81b1bb3b37e86d2a43aef5ff880_JaffaCakes118

  • Size

    211KB

  • Sample

    240428-ht1kksag3x

  • MD5

    04a1c81b1bb3b37e86d2a43aef5ff880

  • SHA1

    1daf08516a85baa7abf5d2d51b4db965808cf632

  • SHA256

    530001e38045813d7276694c428b64b4dc5a15b77f2b3cc757f64b8d34bcf815

  • SHA512

    881034af36cff20176df88d5c9b91badd4119ec25c24046e46899309d2b260603cf9a00da3e1dc19a9fb5b1f5766da178ed5efa7c9bd3e8daa1a820258e5811f

  • SSDEEP

    6144:6ZLwRyyWMa3NIBkL6LDW8dTZdw702edvxiuYOO6umz4N:6ZLwRyyHadIBkLIi8dTL2SvguYOO1mkN

Score
10/10
icedidbankerloadertrojan

Malware Config

Extracted

Family

icedid

C2

ldrstar.casa

Targets

    • Target

      04a1c81b1bb3b37e86d2a43aef5ff880_JaffaCakes118

    • Size

      211KB

    • MD5

      04a1c81b1bb3b37e86d2a43aef5ff880

    • SHA1

      1daf08516a85baa7abf5d2d51b4db965808cf632

    • SHA256

      530001e38045813d7276694c428b64b4dc5a15b77f2b3cc757f64b8d34bcf815

    • SHA512

      881034af36cff20176df88d5c9b91badd4119ec25c24046e46899309d2b260603cf9a00da3e1dc19a9fb5b1f5766da178ed5efa7c9bd3e8daa1a820258e5811f

    • SSDEEP

      6144:6ZLwRyyWMa3NIBkL6LDW8dTZdw702edvxiuYOO6umz4N:6ZLwRyyHadIBkLIi8dTL2SvguYOO1mkN

    Score
    10/10
    icedidbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks