General

  • Target

    a39e271f41128641553d2c6a7bb2d4c5_JaffaCakes118

  • Size

    120KB

  • Sample

    240613-djsprssckc

  • MD5

    a39e271f41128641553d2c6a7bb2d4c5

  • SHA1

    70f7f5e2feea4a17bfd4af1591ff7869f88b5a92

  • SHA256

    d41dc7c994809fa657b8217c6be5ff4f42a7daa61a14f5e711ce4d822bdeba70

  • SHA512

    cff761348de074f250a4df3c7cf380ac5ec217cfc02bda4490c33d1b3189279fd64cd7717289f071433879ff01a571911193b1239c70f7511c9eccd9a5257fe1

  • SSDEEP

    3072:za+dUDMZJjkzSzh25YohAUwr3XnsOOujmZOtw:wMZSzSzhA1rwDXnhZCSw

Malware Config

Extracted

Family

icedid

C2

loadwe4.casa

Targets

    • Target

      a39e271f41128641553d2c6a7bb2d4c5_JaffaCakes118

    • Size

      120KB

    • MD5

      a39e271f41128641553d2c6a7bb2d4c5

    • SHA1

      70f7f5e2feea4a17bfd4af1591ff7869f88b5a92

    • SHA256

      d41dc7c994809fa657b8217c6be5ff4f42a7daa61a14f5e711ce4d822bdeba70

    • SHA512

      cff761348de074f250a4df3c7cf380ac5ec217cfc02bda4490c33d1b3189279fd64cd7717289f071433879ff01a571911193b1239c70f7511c9eccd9a5257fe1

    • SSDEEP

      3072:za+dUDMZJjkzSzh25YohAUwr3XnsOOujmZOtw:wMZSzSzhA1rwDXnhZCSw

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks