Overview

overview

10

Static

static

3

56abafa430...18.exe

windows7-x64

10

56abafa430...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    56abafa43027c3abd0513dbc41f1a84d_JaffaCakes118

  • Size

    52KB

  • Sample

    240518-zetbdsed8t

  • MD5

    56abafa43027c3abd0513dbc41f1a84d

  • SHA1

    1b023618921b0eab208060b41cfdf52b7b7796ca

  • SHA256

    badf5b6c2231f8b56f60d0e71cdadf4c0938626d39230776a6d5adb1f4c352f1

  • SHA512

    93bcbbc4c92bb0466a53dea28cded80d7c11492d8fa9c12c4de53c0b1f5363a2cb94d60218ea37e876f6cca1c4ac6c6ce4365f4af8757eeeab21367470b81b7e

  • SSDEEP

    768:cmuCT9rI4m5reZEddakwOMMkxv92w3QylggXv06DkzExr7j6ZmDWDHkQ37w:yCegudIGMMY9TDlgg/0QcHtDHk

Score
10/10
icedid2118099802bankerloadertrojan

Malware Config

Extracted

Family

icedid

Extracted

Family

icedid

Botnet

2118099802

C2

allpikoloserdzwe.cyou

sipmptomsledy.top
Attributes
  • auth_var

    1

  • url_path

    /audio/

Targets

    • Target

      56abafa43027c3abd0513dbc41f1a84d_JaffaCakes118

    • Size

      52KB

    • MD5

      56abafa43027c3abd0513dbc41f1a84d

    • SHA1

      1b023618921b0eab208060b41cfdf52b7b7796ca

    • SHA256

      badf5b6c2231f8b56f60d0e71cdadf4c0938626d39230776a6d5adb1f4c352f1

    • SHA512

      93bcbbc4c92bb0466a53dea28cded80d7c11492d8fa9c12c4de53c0b1f5363a2cb94d60218ea37e876f6cca1c4ac6c6ce4365f4af8757eeeab21367470b81b7e

    • SSDEEP

      768:cmuCT9rI4m5reZEddakwOMMkxv92w3QylggXv06DkzExr7j6ZmDWDHkQ37w:yCegudIGMMY9TDlgg/0QcHtDHk

    Score
    10/10
    icedid2118099802bankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID Second Stage Loader

      loader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks