General

  • Target

    04a1c81b1bb3b37e86d2a43aef5ff880_JaffaCakes118

  • Size

    211KB

  • Sample

    240428-ht1kksag3x

  • MD5

    04a1c81b1bb3b37e86d2a43aef5ff880

  • SHA1

    1daf08516a85baa7abf5d2d51b4db965808cf632

  • SHA256

    530001e38045813d7276694c428b64b4dc5a15b77f2b3cc757f64b8d34bcf815

  • SHA512

    881034af36cff20176df88d5c9b91badd4119ec25c24046e46899309d2b260603cf9a00da3e1dc19a9fb5b1f5766da178ed5efa7c9bd3e8daa1a820258e5811f

  • SSDEEP

    6144:6ZLwRyyWMa3NIBkL6LDW8dTZdw702edvxiuYOO6umz4N:6ZLwRyyHadIBkLIi8dTL2SvguYOO1mkN

Malware Config

Extracted

Family

icedid

C2

ldrstar.casa

Targets

    • Target

      04a1c81b1bb3b37e86d2a43aef5ff880_JaffaCakes118

    • Size

      211KB

    • MD5

      04a1c81b1bb3b37e86d2a43aef5ff880

    • SHA1

      1daf08516a85baa7abf5d2d51b4db965808cf632

    • SHA256

      530001e38045813d7276694c428b64b4dc5a15b77f2b3cc757f64b8d34bcf815

    • SHA512

      881034af36cff20176df88d5c9b91badd4119ec25c24046e46899309d2b260603cf9a00da3e1dc19a9fb5b1f5766da178ed5efa7c9bd3e8daa1a820258e5811f

    • SSDEEP

      6144:6ZLwRyyWMa3NIBkL6LDW8dTZdw702edvxiuYOO6umz4N:6ZLwRyyHadIBkLIi8dTL2SvguYOO1mkN

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks