General

  • Target

    9e754bbe3e8d27ade46b544ca82d68b2_JaffaCakes118

  • Size

    224KB

  • Sample

    240611-rgkg9szfjn

  • MD5

    9e754bbe3e8d27ade46b544ca82d68b2

  • SHA1

    7a82992b50aefe5599c159bb069687250d7b00ab

  • SHA256

    0dc2f51c2f087769a91ee4349a7dc94846427577a24ba6fffeaa9fd9a25a54bb

  • SHA512

    6af4c48eb1c975b08c3a5fd7553e45aa064a39116442772fc3479a942a41b88125e434784a16c78917661c377d000251c820330d8de35cf4d8b3c27cac60e41e

  • SSDEEP

    3072:U6VYA6I0oElwS9ciW+eM+ppv2LHFKp6+7bUSrtB0J3B1rq46vqDyPIKpPLq/M:UWxXElK+Spv2owSlt6JR1YSDuImq/M

Malware Config

Extracted

Family

icedid

C2

loadberlin.casa

Targets

    • Target

      9e754bbe3e8d27ade46b544ca82d68b2_JaffaCakes118

    • Size

      224KB

    • MD5

      9e754bbe3e8d27ade46b544ca82d68b2

    • SHA1

      7a82992b50aefe5599c159bb069687250d7b00ab

    • SHA256

      0dc2f51c2f087769a91ee4349a7dc94846427577a24ba6fffeaa9fd9a25a54bb

    • SHA512

      6af4c48eb1c975b08c3a5fd7553e45aa064a39116442772fc3479a942a41b88125e434784a16c78917661c377d000251c820330d8de35cf4d8b3c27cac60e41e

    • SSDEEP

      3072:U6VYA6I0oElwS9ciW+eM+ppv2LHFKp6+7bUSrtB0J3B1rq46vqDyPIKpPLq/M:UWxXElK+Spv2owSlt6JR1YSDuImq/M

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks