General

  • Target

    4aeb39eb230acd4a186a28d12a9d4354_JaffaCakes118

  • Size

    120KB

  • Sample

    240516-nyxx5sbf27

  • MD5

    4aeb39eb230acd4a186a28d12a9d4354

  • SHA1

    d36068381db2169c5d24e725968d5de3684f6bc3

  • SHA256

    9d075b18bd7c1a71d298cbbac829ff9753f43caaf9e06681206adc78f45b68fa

  • SHA512

    7e1b01e32c9a5ed787303df72d65e17b297b3b713dbe21c551460d5a8f8457a147eb0f67087f7f41fc24aacf856f2fcf029b9701885c04a01d5ebf5cd5bd7aae

  • SSDEEP

    3072:za+dUDMZJjkzSzh25YohAUwr3XnsOOujmZOtg:wMZSzSzhA1rwDXnhZCSg

Malware Config

Extracted

Family

icedid

C2

loadwe4.casa

Targets

    • Target

      4aeb39eb230acd4a186a28d12a9d4354_JaffaCakes118

    • Size

      120KB

    • MD5

      4aeb39eb230acd4a186a28d12a9d4354

    • SHA1

      d36068381db2169c5d24e725968d5de3684f6bc3

    • SHA256

      9d075b18bd7c1a71d298cbbac829ff9753f43caaf9e06681206adc78f45b68fa

    • SHA512

      7e1b01e32c9a5ed787303df72d65e17b297b3b713dbe21c551460d5a8f8457a147eb0f67087f7f41fc24aacf856f2fcf029b9701885c04a01d5ebf5cd5bd7aae

    • SSDEEP

      3072:za+dUDMZJjkzSzh25YohAUwr3XnsOOujmZOtg:wMZSzSzhA1rwDXnhZCSg

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks