Analysis
-
max time kernel
149s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
22/12/2024, 05:03
General
-
Target
JaffaCakes118_74a50de027f663f991af3da2cffbe71d3871c66bc60607b41bfbaae9ad868fdf.dll
-
Size
490KB
-
MD5
afb0e52c74567c7514496139df7da828
-
SHA1
7bf56ee97a7477e69c64b2de82f70b6b5e1651c5
-
SHA256
74a50de027f663f991af3da2cffbe71d3871c66bc60607b41bfbaae9ad868fdf
-
SHA512
f85b307be0ee9c33cbac227dfd7b6d2931eb557a2923581f6435547b354535f4468f5309f3a5bdfaa86c45366f356e057d3b84d6c7d94244e95212a0246cdab3
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRb:knmj6xK1y3Ik6TZGRb
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_74a50de027f663f991af3da2cffbe71d3871c66bc60607b41bfbaae9ad868fdf.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB