General

  • Target

    91fce90678f482ca077d50437301495f_JaffaCakes118

  • Size

    185KB

  • Sample

    240603-qy28zahg39

  • MD5

    91fce90678f482ca077d50437301495f

  • SHA1

    b1d79d4f72dd45720925a4e35d9193724771bc33

  • SHA256

    4aa11721ca11223bc5dd7d756c7fe5cc9d2d05d7e20f1e0b66c68fd0d59fb172

  • SHA512

    bd06c0dcbb40d86346279ae7447c928309c9062373a0905a4b027913dd9920d0b627b47d56bdcfa1cf05aaea840c4d40ae08b97f2c382edb8b40fc2a5fec1133

  • SSDEEP

    3072:OqYoSNUf3osdx8fB89cmFLou4OYK4CuJfyRkX8ckqzI2WDO+4CUKcWiP6sQTxmSF:jSN0okx8fB4Lou2suJfyRSkqzI2WDO+o

Malware Config

Extracted

Family

icedid

Targets

    • Target

      91fce90678f482ca077d50437301495f_JaffaCakes118

    • Size

      185KB

    • MD5

      91fce90678f482ca077d50437301495f

    • SHA1

      b1d79d4f72dd45720925a4e35d9193724771bc33

    • SHA256

      4aa11721ca11223bc5dd7d756c7fe5cc9d2d05d7e20f1e0b66c68fd0d59fb172

    • SHA512

      bd06c0dcbb40d86346279ae7447c928309c9062373a0905a4b027913dd9920d0b627b47d56bdcfa1cf05aaea840c4d40ae08b97f2c382edb8b40fc2a5fec1133

    • SSDEEP

      3072:OqYoSNUf3osdx8fB89cmFLou4OYK4CuJfyRkX8ckqzI2WDO+4CUKcWiP6sQTxmSF:jSN0okx8fB4Lou2suJfyRSkqzI2WDO+o

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID Second Stage Loader

MITRE ATT&CK Matrix

Tasks