Analysis
-
max time kernel
97s -
max time network
43s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
22-12-2024 03:13
General
-
Target
JaffaCakes118_72bf32f7b943855b95bcbe96c549c06b2d0a2270bad37564a9052cda8b71bc76.dll
-
Size
490KB
-
MD5
066098224c0225fc227b5ed0884c4445
-
SHA1
f83140954f79974410ab7af7e6f034e98c9e392d
-
SHA256
72bf32f7b943855b95bcbe96c549c06b2d0a2270bad37564a9052cda8b71bc76
-
SHA512
7804bcb84b132892e564908f08558e947d0fe5cfb05799fed3364bb1fe304bddc876fb2dfaa1e8db013f008a5c37dcc46c078d16a68d902cafc1c60c6411f14e
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRA:knmj6xK1y3Ik6TZGRA
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_72bf32f7b943855b95bcbe96c549c06b2d0a2270bad37564a9052cda8b71bc76.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB