General

  • Target

    d7c4c7d7b78e100d39ed4fd044366a02_JaffaCakes118

  • Size

    120KB

  • Sample

    240910-h1h9washpf

  • MD5

    d7c4c7d7b78e100d39ed4fd044366a02

  • SHA1

    6c47c5f32891b9905b0b44db7d1acb275cb0f576

  • SHA256

    cae8b4d8837f9c91e253a2f12cc797247a3d92a81e2219eb291cf294c39653ee

  • SHA512

    00388a90836094268014da166fbd2e59ecc9762255ef9666078536b644fddf73baa7bcd7d4cfb1f772fec6ca65b7bd3648eb6110ec9ccb9f7e75314077ed20fc

  • SSDEEP

    3072:tpteWUxswmB6cKEyYo8wNSNbgRdN1v48zdtyT:cswm5KloaSNERdN1Ag6

Malware Config

Extracted

Family

icedid

C2

loadro3.casa

Targets

    • Target

      d7c4c7d7b78e100d39ed4fd044366a02_JaffaCakes118

    • Size

      120KB

    • MD5

      d7c4c7d7b78e100d39ed4fd044366a02

    • SHA1

      6c47c5f32891b9905b0b44db7d1acb275cb0f576

    • SHA256

      cae8b4d8837f9c91e253a2f12cc797247a3d92a81e2219eb291cf294c39653ee

    • SHA512

      00388a90836094268014da166fbd2e59ecc9762255ef9666078536b644fddf73baa7bcd7d4cfb1f772fec6ca65b7bd3648eb6110ec9ccb9f7e75314077ed20fc

    • SSDEEP

      3072:tpteWUxswmB6cKEyYo8wNSNbgRdN1v48zdtyT:cswm5KloaSNERdN1Ag6

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

    • IcedID First Stage Loader

MITRE ATT&CK Enterprise v15

Tasks