Analysis
-
max time kernel
142s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
22-12-2024 06:38
General
-
Target
JaffaCakes118_eb1ae7b27dac907d63469b9316333e78bac892f365273643b16e5f24faa364ca.dll
-
Size
490KB
-
MD5
3759e867b16f55186821c29dc62900c7
-
SHA1
9d179b9b8bafbca70225b23f630ed3754f83a390
-
SHA256
eb1ae7b27dac907d63469b9316333e78bac892f365273643b16e5f24faa364ca
-
SHA512
950c0a4c3cd52d83a35aad1f1bbe074a60d3b52bc121889a858cf33f4aaefb7a340b6510bf553e43dec96439592d8c07fdfe072a9a55a4b4742ced5c774c64ed
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRl:knmj6xK1y3Ik6TZGRl
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_eb1ae7b27dac907d63469b9316333e78bac892f365273643b16e5f24faa364ca.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB