Analysis
-
max time kernel
141s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
22-12-2024 00:29
General
-
Target
JaffaCakes118_a5a79882fc31bb1f6f0b05f19795e5fae4fffca89b13e4143f20481c17468ad5.dll
-
Size
490KB
-
MD5
ea3a0983a4edc311f97df6866c9ef3db
-
SHA1
f366d0e72fb37e9555643bfb6f5490657153d86d
-
SHA256
a5a79882fc31bb1f6f0b05f19795e5fae4fffca89b13e4143f20481c17468ad5
-
SHA512
03a98267a5db9a0ec72797dda44d95fd8083f90956792f0244de188c40009e71168ce7e3203c9e2f81c98f6e695b18d29a7c6ec68822fe9225241d43483d67ef
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaR4:knmj6xK1y3Ik6TZGR4
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_a5a79882fc31bb1f6f0b05f19795e5fae4fffca89b13e4143f20481c17468ad5.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB