General

  • Target
    582ad51b14aec27c377e94075c8f7acb_JaffaCakes118
  • Size 406KB
  • Sample240519-c7nv2see98
  • SHA256 2de6bde148b9a42a65f5dae36c903811e56d702d7d319900877f2d5d74273236
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • icedid

C2
  • ldrruble.casa

Targets

    • Target
      582ad51b14aec27c377e94075c8f7acb_JaffaCakes118
    • Size 406KB
    • SHA256 2de6bde148b9a42a65f5dae36c903811e56d702d7d319900877f2d5d74273236
    • MD5 SHA1 SHA512 SSDEEP
    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks