Analysis
-
max time kernel
150s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21-12-2024 22:54
General
-
Target
JaffaCakes118_04c690fc681d4e91ba3a25110fe3f3bea880a8eb8712429ccb05dc948b3a8249.dll
-
Size
490KB
-
MD5
a5fb918049352f814b4be7a5ee157afd
-
SHA1
deccccffa3343b874c9a3de5f3a2eaae2004e6e4
-
SHA256
04c690fc681d4e91ba3a25110fe3f3bea880a8eb8712429ccb05dc948b3a8249
-
SHA512
02ffa5320de18d343fb13c4d5bae8cb8bebc6b372f6d0df6a6dd427419feb09b3197c545c3cdb860dda30bddd0bd97d8bd0832f03715e506a6f7c2e3d12b0228
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRc:knmj6xK1y3Ik6TZGRc
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_04c690fc681d4e91ba3a25110fe3f3bea880a8eb8712429ccb05dc948b3a8249.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB