General

  • Target

    25fb0b3b8c84da8a31a57d065f885816_JaffaCakes118

  • Size

    389KB

  • Sample

    240508-v9yr5saa65

  • MD5

    25fb0b3b8c84da8a31a57d065f885816

  • SHA1

    266b53bc10056d5753fe55dafa78707acc872f49

  • SHA256

    5892f7ad0218286a2e52a5eedbea62c80532a70fa51b2d202b38ad2fcf61cedb

  • SHA512

    52c8a2c466faefa57d7e3b6787cacd1493faf132041fa2fbd9006785a8524bc5ab47bb272b36d7b0f8c24189ec792950eb3449c7ae69ec83490bdefe679753b4

  • SSDEEP

    6144:AqWgWa3L+/4CzI5kNfTg1RtllBNic2kflJ1JIXqFLFneX5Ju3He8JWv/WuooslsX:ApVa3L+QSI5Pif0rjY3

Malware Config

Extracted

Family

icedid

Targets

    • Target

      25fb0b3b8c84da8a31a57d065f885816_JaffaCakes118

    • Size

      389KB

    • MD5

      25fb0b3b8c84da8a31a57d065f885816

    • SHA1

      266b53bc10056d5753fe55dafa78707acc872f49

    • SHA256

      5892f7ad0218286a2e52a5eedbea62c80532a70fa51b2d202b38ad2fcf61cedb

    • SHA512

      52c8a2c466faefa57d7e3b6787cacd1493faf132041fa2fbd9006785a8524bc5ab47bb272b36d7b0f8c24189ec792950eb3449c7ae69ec83490bdefe679753b4

    • SSDEEP

      6144:AqWgWa3L+/4CzI5kNfTg1RtllBNic2kflJ1JIXqFLFneX5Ju3He8JWv/WuooslsX:ApVa3L+QSI5Pif0rjY3

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks