General

  • Target

    19478b0c47b758ea811f9a6b9857fcd9_JaffaCakes118

  • Size

    120KB

  • Sample

    240505-z1fx7aea7s

  • MD5

    19478b0c47b758ea811f9a6b9857fcd9

  • SHA1

    d8f506529cba7b603c598c4b6651f8b9ffe2c535

  • SHA256

    24e4d25395afc41a3e9b860ae7fca1485ecbd3e432387a62c893412978f9a525

  • SHA512

    4aa7a968f20db0eac8b86bf6ff430560b86c3e1ac6e672ccb034ca03530c4055e06fd3a8156bdf9077f141ffaaf81409cdba67bdbfab80c6ff50778ea3cfef7e

  • SSDEEP

    3072:za+dUDMZJjkzSzh25YohAUwr3XnsOOujmZOt0:wMZSzSzhA1rwDXnhZCS0

Malware Config

Extracted

Family

icedid

C2

loadwe4.casa

Targets

    • Target

      19478b0c47b758ea811f9a6b9857fcd9_JaffaCakes118

    • Size

      120KB

    • MD5

      19478b0c47b758ea811f9a6b9857fcd9

    • SHA1

      d8f506529cba7b603c598c4b6651f8b9ffe2c535

    • SHA256

      24e4d25395afc41a3e9b860ae7fca1485ecbd3e432387a62c893412978f9a525

    • SHA512

      4aa7a968f20db0eac8b86bf6ff430560b86c3e1ac6e672ccb034ca03530c4055e06fd3a8156bdf9077f141ffaaf81409cdba67bdbfab80c6ff50778ea3cfef7e

    • SSDEEP

      3072:za+dUDMZJjkzSzh25YohAUwr3XnsOOujmZOt0:wMZSzSzhA1rwDXnhZCS0

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks