Analysis
-
max time kernel
140s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
22-12-2024 01:35
General
-
Target
JaffaCakes118_739e8186ff7aac12f0c3d5d1f5b6435e3be34832cd1022969992d6cb0a11d201.dll
-
Size
490KB
-
MD5
6798b1c1ff339e882f711bd733fe1fa5
-
SHA1
f7ac42b9f5865c243d9ee62f4b9477780b19d751
-
SHA256
739e8186ff7aac12f0c3d5d1f5b6435e3be34832cd1022969992d6cb0a11d201
-
SHA512
cc2ecad3dee76049b90a3bae5619d6e63d8dbb456f09df3f7a0a223f1b00687a6fcc96d80e1089ef16d89f63553a098fffb79df10bb7502e37b88f999ff2918a
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRN:knmj6xK1y3Ik6TZGRN
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_739e8186ff7aac12f0c3d5d1f5b6435e3be34832cd1022969992d6cb0a11d201.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB