Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
22-12-2024 04:25
General
-
Target
JaffaCakes118_3f40a0c8d58675a43b948ab3fca9df95e8d65fc3425f0415be46d3d0a21b89b8.dll
-
Size
490KB
-
MD5
f1d270df7fa625c149c34e431c655a6a
-
SHA1
1359bf490409f14865ce3eafe6c908bee1025789
-
SHA256
3f40a0c8d58675a43b948ab3fca9df95e8d65fc3425f0415be46d3d0a21b89b8
-
SHA512
ee1f8373c3b7e4397123bddc9fd40daf29e392ced4bac6f4108925c86b9a7c0488501a58ae85700ed6477017abdbd1117607116e02a3ce1da7d27665d79dff39
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRH:knmj6xK1y3Ik6TZGRH
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_3f40a0c8d58675a43b948ab3fca9df95e8d65fc3425f0415be46d3d0a21b89b8.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB