Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
22-12-2024 04:16
General
-
Target
JaffaCakes118_982d8550bfc80aa14f8a310fd10f28e846fbd8e983d6dd86e0c8213dcaf1055b.dll
-
Size
490KB
-
MD5
1dacff3718b5d34743e0f540c72156ee
-
SHA1
e003c9f03e83e8728ad2cf7a46fba3e593d4b901
-
SHA256
982d8550bfc80aa14f8a310fd10f28e846fbd8e983d6dd86e0c8213dcaf1055b
-
SHA512
3e84c1e087a7182329c0dc796400398d6c1809caa453dc0c212a15427b80cc34f866cacd34e3bb5b5898ac444cb10912fba59efa2c4664bae6d622c7d66bf7eb
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRW:knmj6xK1y3Ik6TZGRW
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_982d8550bfc80aa14f8a310fd10f28e846fbd8e983d6dd86e0c8213dcaf1055b.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB