General

  • Target

    3c0f14c3382d7bc1c676183d71a6ade8_JaffaCakes118

  • Size

    185KB

  • Sample

    240512-zwx1xaag79

  • MD5

    3c0f14c3382d7bc1c676183d71a6ade8

  • SHA1

    005c98f66ecfc3d00e8f6caf1098f1d67f4d82b1

  • SHA256

    4ab7976b062def0c7c1231e2a8d663c8a2e0c14f305b573dbc0b8ff49d10f3ba

  • SHA512

    c539b554e3d818237d685a6bd4109779df8f2239b829d4d2d1a1af9aed736a475856c81cd3cc2c8875f1cc6381df5d3e2cdf085537823e7715f00c27ededdbb0

  • SSDEEP

    3072:8qYoSNUf3osdx8fB89cmFLou4OYK4CuJfCRkX8ckqzI2WDO+4CUKcWiP6sQTxmSF:ZSN0okx8fB4Lou2suJfCRSkqzI2WDO+o

Malware Config

Extracted

Family

icedid

Targets

    • Target

      3c0f14c3382d7bc1c676183d71a6ade8_JaffaCakes118

    • Size

      185KB

    • MD5

      3c0f14c3382d7bc1c676183d71a6ade8

    • SHA1

      005c98f66ecfc3d00e8f6caf1098f1d67f4d82b1

    • SHA256

      4ab7976b062def0c7c1231e2a8d663c8a2e0c14f305b573dbc0b8ff49d10f3ba

    • SHA512

      c539b554e3d818237d685a6bd4109779df8f2239b829d4d2d1a1af9aed736a475856c81cd3cc2c8875f1cc6381df5d3e2cdf085537823e7715f00c27ededdbb0

    • SSDEEP

      3072:8qYoSNUf3osdx8fB89cmFLou4OYK4CuJfCRkX8ckqzI2WDO+4CUKcWiP6sQTxmSF:ZSN0okx8fB4Lou2suJfCRSkqzI2WDO+o

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks