Analysis
-
max time kernel
142s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
21-12-2024 18:47
General
-
Target
JaffaCakes118_697fd2c29abb20ca61deb57c6ea7e046f419f6f2e622e13d4b536706b0216318.dll
-
Size
490KB
-
MD5
46d73b42c85ee8f076d7ca49c424b4d2
-
SHA1
ad8c95618f613465649d9d503ed53c8f88de616c
-
SHA256
697fd2c29abb20ca61deb57c6ea7e046f419f6f2e622e13d4b536706b0216318
-
SHA512
ab9538ac190265353fe15b0ec4208de55c4564ce8f204bf6092a955d43c36b6793367e0a480e6700670196239f4614fc0fd1cf7c447596d6fcef21e98589dba1
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaR9:knmj6xK1y3Ik6TZGR9
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_697fd2c29abb20ca61deb57c6ea7e046f419f6f2e622e13d4b536706b0216318.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB