General

  • Target

    c155e8c50dd8217aaf802818cfb2bd84_JaffaCakes118

  • Size

    120KB

  • Sample

    240825-xarwnazfjj

  • MD5

    c155e8c50dd8217aaf802818cfb2bd84

  • SHA1

    9bf4ddeef59699c40f075cafb1137e1ad6686ed7

  • SHA256

    f90a1824f690bcd5c333bd78de0164174fffb12160c26699d6cd17cc10b71a49

  • SHA512

    7ad3f8c43d588ebd2524798b64d29cb566d09a44999d4feb15a2d774db285aa02b8434bfcced042b127310cfebcdaaf0dc806b199756766b5b7aa87bb1a1b239

  • SSDEEP

    3072:za+dUDMZJjkzSzh25YohAUwr3XnsOOujmZOt9:wMZSzSzhA1rwDXnhZCS9

Malware Config

Extracted

Family

icedid

C2

loadwe4.casa

Targets

    • Target

      c155e8c50dd8217aaf802818cfb2bd84_JaffaCakes118

    • Size

      120KB

    • MD5

      c155e8c50dd8217aaf802818cfb2bd84

    • SHA1

      9bf4ddeef59699c40f075cafb1137e1ad6686ed7

    • SHA256

      f90a1824f690bcd5c333bd78de0164174fffb12160c26699d6cd17cc10b71a49

    • SHA512

      7ad3f8c43d588ebd2524798b64d29cb566d09a44999d4feb15a2d774db285aa02b8434bfcced042b127310cfebcdaaf0dc806b199756766b5b7aa87bb1a1b239

    • SSDEEP

      3072:za+dUDMZJjkzSzh25YohAUwr3XnsOOujmZOt9:wMZSzSzhA1rwDXnhZCS9

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Enterprise v15

Tasks