General

  • Target

    ec4b8927826bcef3a5c4ab9e827e172c_JaffaCakes118

  • Size

    191KB

  • Sample

    240411-akjxgaab7v

  • MD5

    ec4b8927826bcef3a5c4ab9e827e172c

  • SHA1

    c5adeff83369fb337fc898df309a03de25b7aaee

  • SHA256

    85ee9c6b6b6cc4402355965527f9cc8638c3e536aa86eb27c592868336f6fe38

  • SHA512

    d4921112e143811e874f98a3e4184d1b227fb81546c5eb1fae4af9885b010ea1db634a62213e3f9e8a0c7c2af8272d3ccdeab62708a897fae22d468204bf5b85

  • SSDEEP

    3072:ccYZrnyQL8toZWf5phHqhqEd7ckhk1vd2g/ahdbNagw4At0wMtU9hCEf8//DBQ8:0Q6Wf5Whv7fMvwbNXtYLMG8

Malware Config

Extracted

Family

icedid

C2

ldrpolka.casa

Targets

    • Target

      ec4b8927826bcef3a5c4ab9e827e172c_JaffaCakes118

    • Size

      191KB

    • MD5

      ec4b8927826bcef3a5c4ab9e827e172c

    • SHA1

      c5adeff83369fb337fc898df309a03de25b7aaee

    • SHA256

      85ee9c6b6b6cc4402355965527f9cc8638c3e536aa86eb27c592868336f6fe38

    • SHA512

      d4921112e143811e874f98a3e4184d1b227fb81546c5eb1fae4af9885b010ea1db634a62213e3f9e8a0c7c2af8272d3ccdeab62708a897fae22d468204bf5b85

    • SSDEEP

      3072:ccYZrnyQL8toZWf5phHqhqEd7ckhk1vd2g/ahdbNagw4At0wMtU9hCEf8//DBQ8:0Q6Wf5Whv7fMvwbNXtYLMG8

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks