Analysis
-
max time kernel
141s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
22-12-2024 01:34
General
-
Target
JaffaCakes118_133311830ead78d15d3c116772a0e4086c2787315ad65f5b69610957c65a7805.dll
-
Size
490KB
-
MD5
28278ce34ceeac54e839eb6133e72700
-
SHA1
23002cc464aa15584f6e723ac8c7af3d7ca488e4
-
SHA256
133311830ead78d15d3c116772a0e4086c2787315ad65f5b69610957c65a7805
-
SHA512
dcc33b291357f137a8b5078f06f246cdf45827a027be4d15ea8bb7349a552dc85058a007ee1aab0950bb066d9868ff92124ed4b7b809edbfe4f6cab54df21b53
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRl:knmj6xK1y3Ik6TZGRl
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_133311830ead78d15d3c116772a0e4086c2787315ad65f5b69610957c65a7805.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB