General

  • Target

    be0311fca2f688f1d50f4b7917758fd9_JaffaCakes118

  • Size

    120KB

  • Sample

    240824-gl741sweke

  • MD5

    be0311fca2f688f1d50f4b7917758fd9

  • SHA1

    9cddb8b4ba3ad1971e165daa597f06286f34e33b

  • SHA256

    02026f323eea8b841f056a23b376cc58ca54956dd3c8216f87564d71c6736e06

  • SHA512

    e123913c0940069933767f20173f5ff5356e1bfeb1f522d34d640e79bd676bba7ca46d0f4f9556b4f55bc5f6c706a899e76765b793da75b38c8ab507e5b71ce9

  • SSDEEP

    3072:za+dUDMZJjkzSzh25YohAUwr3XnsOOujmZOtv:wMZSzSzhA1rwDXnhZCSv

Malware Config

Extracted

Family

icedid

C2

loadwe4.casa

Targets

    • Target

      be0311fca2f688f1d50f4b7917758fd9_JaffaCakes118

    • Size

      120KB

    • MD5

      be0311fca2f688f1d50f4b7917758fd9

    • SHA1

      9cddb8b4ba3ad1971e165daa597f06286f34e33b

    • SHA256

      02026f323eea8b841f056a23b376cc58ca54956dd3c8216f87564d71c6736e06

    • SHA512

      e123913c0940069933767f20173f5ff5356e1bfeb1f522d34d640e79bd676bba7ca46d0f4f9556b4f55bc5f6c706a899e76765b793da75b38c8ab507e5b71ce9

    • SSDEEP

      3072:za+dUDMZJjkzSzh25YohAUwr3XnsOOujmZOtv:wMZSzSzhA1rwDXnhZCSv

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Enterprise v15

Tasks