Overview

overview

10

Static

static

3

5d7ce23989...18.dll

windows7-x64

10

5d7ce23989...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5d7ce2398942eb03bd0065aea3d5da15_JaffaCakes118

  • Size

    406KB

  • Sample

    240520-gjlg8seh7x

  • MD5

    5d7ce2398942eb03bd0065aea3d5da15

  • SHA1

    8c1977305284f6ef719d6e92f0e90f069476a62a

  • SHA256

    705e14735da74b107357a676c15b07c0f0c86888b8f98ba86e1029ff4e4858df

  • SHA512

    a014ab056f924d3a037df8bbdd59cc8e3f95a25c5c6fed04a5a90aa848aca5af2700b4ae1367d9a92efe7eb82265c8c5ecf5e24ba251bc752c68ba49bece9fa6

  • SSDEEP

    6144:MU/OLpMfiR6vtVIgyPFiChgkX7WOMeLpebnZgUe4A29pNwzg:MU/OLCf1LqPACIeoFa4A29Dwzg

Score
10/10
icedidbankerloadertrojan

Malware Config

Extracted

Family

icedid

C2

ldrruble.casa

Targets

    • Target

      5d7ce2398942eb03bd0065aea3d5da15_JaffaCakes118

    • Size

      406KB

    • MD5

      5d7ce2398942eb03bd0065aea3d5da15

    • SHA1

      8c1977305284f6ef719d6e92f0e90f069476a62a

    • SHA256

      705e14735da74b107357a676c15b07c0f0c86888b8f98ba86e1029ff4e4858df

    • SHA512

      a014ab056f924d3a037df8bbdd59cc8e3f95a25c5c6fed04a5a90aa848aca5af2700b4ae1367d9a92efe7eb82265c8c5ecf5e24ba251bc752c68ba49bece9fa6

    • SSDEEP

      6144:MU/OLpMfiR6vtVIgyPFiChgkX7WOMeLpebnZgUe4A29pNwzg:MU/OLCf1LqPACIeoFa4A29Dwzg

    Score
    10/10
    icedidbankerloadertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid

    • IcedID First Stage Loader

      loader

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks