Analysis
-
max time kernel
142s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
22-12-2024 02:33
General
-
Target
JaffaCakes118_d6895e50c7fe8b34decb35406ebd76cf36d23f67babf2feb87c905baff4d897b.dll
-
Size
490KB
-
MD5
392c8a751f4a09bc5330efacd564b9ca
-
SHA1
f7ff178254a843ac46030a34dc56b26e5da4a862
-
SHA256
d6895e50c7fe8b34decb35406ebd76cf36d23f67babf2feb87c905baff4d897b
-
SHA512
1bcad19392ce3b3801ac061aff44e87cc692ecc368e1d16331989dbd81975c50ae2d1a0ea3cf8a261d4734f608ad6b897f85c836f6fa237a2ceb474ff9262ffc
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRU:knmj6xK1y3Ik6TZGRU
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_d6895e50c7fe8b34decb35406ebd76cf36d23f67babf2feb87c905baff4d897b.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB