General

  • Target

    af423d1c808e78c71bcdeb4d7cec2791_JaffaCakes118

  • Size

    114KB

  • Sample

    240820-pwmvtswdjq

  • MD5

    af423d1c808e78c71bcdeb4d7cec2791

  • SHA1

    a4a8409801ac6d0469e9fa2ab08678c10414682a

  • SHA256

    08f4ade2d832cb12f683d0db141f747b731d0d02cac489c6eff17561a04760e7

  • SHA512

    c6d8b494d5ed14f39bbd5e747f0c998fa83cd696f373e51ae8eecef244769ae4facee9f54070b2c961ed3fe9cdaf4af90b1e0cd264f87e226545d00a7ea3cc6f

  • SSDEEP

    1536:Oo4AIHtqf937rF7cppZPpV8CbklzgVb8ZMsoNd2hUx20t/Blf:F4j69LFcd8CcgVb8ZgOWx20t/Blf

Malware Config

Extracted

Family

icedid

C2

ldrcreep.net

Targets

    • Target

      af423d1c808e78c71bcdeb4d7cec2791_JaffaCakes118

    • Size

      114KB

    • MD5

      af423d1c808e78c71bcdeb4d7cec2791

    • SHA1

      a4a8409801ac6d0469e9fa2ab08678c10414682a

    • SHA256

      08f4ade2d832cb12f683d0db141f747b731d0d02cac489c6eff17561a04760e7

    • SHA512

      c6d8b494d5ed14f39bbd5e747f0c998fa83cd696f373e51ae8eecef244769ae4facee9f54070b2c961ed3fe9cdaf4af90b1e0cd264f87e226545d00a7ea3cc6f

    • SSDEEP

      1536:Oo4AIHtqf937rF7cppZPpV8CbklzgVb8ZMsoNd2hUx20t/Blf:F4j69LFcd8CcgVb8ZgOWx20t/Blf

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Enterprise v15

Tasks