General

  • Target

    e564f733a1770433c528aabaaa1b4f76_JaffaCakes118

  • Size

    42KB

  • Sample

    240407-vbhchahe23

  • MD5

    e564f733a1770433c528aabaaa1b4f76

  • SHA1

    bd0c51d9804e68aff2ed42018325457235f7942e

  • SHA256

    2a3d9c6580034ee53583a1e258736f92d77a9e48a8658e2040afbc6459f6f6d5

  • SHA512

    1aa6d15d6f15d168cc949996b58e8b37b53ee60f708526cd7da408e9345b0ce8b81523e24585806038cbd42be2b7851c9a4fd74188e2f1265275fdc27d7ce85b

  • SSDEEP

    768:atj+ZsANytyuDqIeJ6PLuCO2qQlgTuorrOw6tOl3RT0bxUsTWQ2fX:WjFCPpcPLuCO20aoQM3RgVUFv

Malware Config

Extracted

Family

icedid

Campaign

4238614428

C2

immotransfer.top

Targets

    • Target

      e564f733a1770433c528aabaaa1b4f76_JaffaCakes118

    • Size

      42KB

    • MD5

      e564f733a1770433c528aabaaa1b4f76

    • SHA1

      bd0c51d9804e68aff2ed42018325457235f7942e

    • SHA256

      2a3d9c6580034ee53583a1e258736f92d77a9e48a8658e2040afbc6459f6f6d5

    • SHA512

      1aa6d15d6f15d168cc949996b58e8b37b53ee60f708526cd7da408e9345b0ce8b81523e24585806038cbd42be2b7851c9a4fd74188e2f1265275fdc27d7ce85b

    • SSDEEP

      768:atj+ZsANytyuDqIeJ6PLuCO2qQlgTuorrOw6tOl3RT0bxUsTWQ2fX:WjFCPpcPLuCO20aoQM3RgVUFv

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

MITRE ATT&CK Matrix

Tasks