Analysis
-
max time kernel
141s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
22-12-2024 04:00
General
-
Target
JaffaCakes118_24755da1b18cb0befb6a62b2b985e3b9fa9442c07f220bf6df22c998958b460b.dll
-
Size
490KB
-
MD5
ef933df2cf1bf5a1b94ffb9df1b25016
-
SHA1
231c5aaee216009fc599d4772fa8eee547ed6645
-
SHA256
24755da1b18cb0befb6a62b2b985e3b9fa9442c07f220bf6df22c998958b460b
-
SHA512
c928b76bb77a819540d279b9d33e347d93af30fdd3ac0cf988ec6bdd52662e6f716db336e432178e6f782a7991d92c63ab1ea6922c852a3f2c2c002ead92f83d
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRx:knmj6xK1y3Ik6TZGRx
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_24755da1b18cb0befb6a62b2b985e3b9fa9442c07f220bf6df22c998958b460b.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB