Analysis
-
max time kernel
141s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
22-12-2024 00:28
General
-
Target
JaffaCakes118_55ed2bca9466bcfa1ed830c67f6cf126f0017675e6b86afcd49b69312cfd71aa.dll
-
Size
490KB
-
MD5
94cf07f3616c7fa436116aba60f29f0e
-
SHA1
f69528d3e1985008e1d3c52d606d15df1e390e6f
-
SHA256
55ed2bca9466bcfa1ed830c67f6cf126f0017675e6b86afcd49b69312cfd71aa
-
SHA512
8f1046e9938a53456952caee83a5ef17d240f6622ded7809ceb97a35d3c0a4f06e8ca7230c513f9fd7905ada3bc676f38c5b4d555b50d214730bbfadf0b7139c
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaR7:knmj6xK1y3Ik6TZGR7
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_55ed2bca9466bcfa1ed830c67f6cf126f0017675e6b86afcd49b69312cfd71aa.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB