General

  • Target

    b20a7461e5651d526026554d5f32246f_JaffaCakes118

  • Size

    120KB

  • Sample

    240616-gsl55awepm

  • MD5

    b20a7461e5651d526026554d5f32246f

  • SHA1

    338467315fd2f0a0be362246eafa40a06a5a2f05

  • SHA256

    dba67ec7a7ce016c238893260e21737a6738f611e3bb7cef80d2bb47ddd7d140

  • SHA512

    4f3b108877f75c4bcaba3c08293d88c7bdf59aca7858cfbcbd38e2b726898cdd98aa60efab802cb337863c56f90a6b1344f31773aece48ce525a0da7095b1d1a

  • SSDEEP

    3072:za+dUDMZJjkzSzh25YohAUwr3XnsOOujmZOt/:wMZSzSzhA1rwDXnhZCS/

Malware Config

Extracted

Family

icedid

C2

loadwe4.casa

Targets

    • Target

      b20a7461e5651d526026554d5f32246f_JaffaCakes118

    • Size

      120KB

    • MD5

      b20a7461e5651d526026554d5f32246f

    • SHA1

      338467315fd2f0a0be362246eafa40a06a5a2f05

    • SHA256

      dba67ec7a7ce016c238893260e21737a6738f611e3bb7cef80d2bb47ddd7d140

    • SHA512

      4f3b108877f75c4bcaba3c08293d88c7bdf59aca7858cfbcbd38e2b726898cdd98aa60efab802cb337863c56f90a6b1344f31773aece48ce525a0da7095b1d1a

    • SSDEEP

      3072:za+dUDMZJjkzSzh25YohAUwr3XnsOOujmZOt/:wMZSzSzhA1rwDXnhZCS/

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Matrix

Tasks