General
-
Target
JaffaCakes118_933819bbe631a47e9d755348e17bb47f3f2c10cde644c5a5a86e6d63fbd67299
-
Size
470KB
-
Sample
241222-qr52aazqcl
-
MD5
9f0a177f554b7c42b3a8c6707062d69c
-
SHA1
b62417f0b6245a3cd10a1aadde58f9cd4405f214
-
SHA256
933819bbe631a47e9d755348e17bb47f3f2c10cde644c5a5a86e6d63fbd67299
-
SHA512
c4b12ef11b75df9e2c1aa171e2f7bd702d28cfb86db2fd9f98f62beca82c79f4d1c3753200ba31de09b2877020e34180f06d38bf9b78a69e6033824ca522b1b9
-
SSDEEP
12288:RWYQ9HY96DaOgXV+xytrDtdGZMi1bBXEdykLAg3H2:kYhk+NXVltrDIn1tUMkUsW
Malware Config
Extracted
icedid
1677997313
asrspoe.com
aviospe.com
-
auth_var
13
-
url_path
/news/
Targets
-
-
Target
core.bat
-
Size
180B
-
MD5
80270eb55332f947de65daea11a7d9f4
-
SHA1
93e8ed14b54c3ee023958709d1947f337199e12c
-
SHA256
4d115964cb077eae5971f80fc37db395309af4a4cc2815710d626f4e2d2f0234
-
SHA512
7c0b698f2a30ada6ae94ae3e9a202cf1983df388185fe6a8db840f577271b82ba91b71eaf87d005f0dcec6d86b64904f950d54679a075a4269adf13c04a80d5b
Score10/10-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
-
-
Target
trick-.tmp
-
Size
271KB
-
MD5
23eb2184a23bc182e9548449928824f3
-
SHA1
1b3b0c20743c4b1af1996de8e485e0e42ae58d6a
-
SHA256
e0be64ee31c3671f50e81d45cd6b02d87203142019cd7d004669e2aaf297d888
-
SHA512
edecb82bf3d241a07e4ddf49c14dc0bdda2a3e6c57ad13317d11808f571eb938f9fbf5d22a92e54abf557bbe52e81d233ec81c6d073df12a5781cec39bc27e86
-
SSDEEP
6144:vIxOHbFGJSU07q3EnG/QlT7mazbUGtSa0JXwRA9yto:oOHbFGsU0WEZtS8voAC
Score10/10-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-