General

  • Target

    861613cdfa40542f4890c5ec8ffa8ea4_JaffaCakes118

  • Size

    120KB

  • Sample

    240531-f3t32shd48

  • MD5

    861613cdfa40542f4890c5ec8ffa8ea4

  • SHA1

    1dc83b843d335b6e4f6e964739891d11f63f30b0

  • SHA256

    c14f7ece9b6c84d7e81839663fdfcb3cd3eacd06503f02e1cd4ccd9bb90019ca

  • SHA512

    76f355c680b40cef7332bfadd63d4f4e15b65c531b9d445344065c5a0a200210ac8ede75dcdd9852e3b08221c87b8a4cbf57c5e6b6db4164719d6382e7c5ea64

  • SSDEEP

    3072:za+dUDMZJjkzSzh25YohAUwr3XnsOOujmZOtT:wMZSzSzhA1rwDXnhZCST

Malware Config

Extracted

Family

icedid

C2

loadwe4.casa

Targets

    • Target

      861613cdfa40542f4890c5ec8ffa8ea4_JaffaCakes118

    • Size

      120KB

    • MD5

      861613cdfa40542f4890c5ec8ffa8ea4

    • SHA1

      1dc83b843d335b6e4f6e964739891d11f63f30b0

    • SHA256

      c14f7ece9b6c84d7e81839663fdfcb3cd3eacd06503f02e1cd4ccd9bb90019ca

    • SHA512

      76f355c680b40cef7332bfadd63d4f4e15b65c531b9d445344065c5a0a200210ac8ede75dcdd9852e3b08221c87b8a4cbf57c5e6b6db4164719d6382e7c5ea64

    • SSDEEP

      3072:za+dUDMZJjkzSzh25YohAUwr3XnsOOujmZOtT:wMZSzSzhA1rwDXnhZCST

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks