Analysis
-
max time kernel
141s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
21-12-2024 19:56
General
-
Target
JaffaCakes118_50d0f53d1333fe6a27886ec103c646d9395b4bfa26b5f4204bb0fbc21dea82e2.dll
-
Size
490KB
-
MD5
da90ca5a858a85038fb795dbc0974183
-
SHA1
67aa58e71389633fb35b4837802d9f8ad5058576
-
SHA256
50d0f53d1333fe6a27886ec103c646d9395b4bfa26b5f4204bb0fbc21dea82e2
-
SHA512
01a52fc36139b014f86eabaa4482a05291d56375e8a8ef4a2d6b0e9562cb218dad8fc3c3dd2f01c5afd6f6c966a2f8c6eb80f7d979316f0964917d402b37a242
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRu:knmj6xK1y3Ik6TZGRu
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_50d0f53d1333fe6a27886ec103c646d9395b4bfa26b5f4204bb0fbc21dea82e2.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB