Analysis
-
max time kernel
142s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
22-12-2024 00:37
General
-
Target
JaffaCakes118_d5d2f6f172e525858d27eb63146d45dfdd1366a8be9c2d96c2bc957009496e01.dll
-
Size
490KB
-
MD5
d2723c28551e1fa21edf3f15506a53d5
-
SHA1
e1fdf3444d09cf19919d4fb58836c65734b379fc
-
SHA256
d5d2f6f172e525858d27eb63146d45dfdd1366a8be9c2d96c2bc957009496e01
-
SHA512
091cee2d90a6245f14c8f56683ec6273c6ce540712c97905b4a2eb883e9dfbf3ce7bc765a53208ad72f9d24570fb19064ba39b42c283c15df555bac3907ca53d
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaR+:knmj6xK1y3Ik6TZGR+
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_d5d2f6f172e525858d27eb63146d45dfdd1366a8be9c2d96c2bc957009496e01.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB