Analysis
-
max time kernel
141s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
22-12-2024 08:12
General
-
Target
JaffaCakes118_add4688e30d4eca068cd9f8492a62511dcf160d633722309b04f4ad17c23e6d5.dll
-
Size
490KB
-
MD5
3cf0e2b86d4e8793d452f816113f0da1
-
SHA1
817f0bee106069c1452a8ea22db1ddd8a19a1a07
-
SHA256
add4688e30d4eca068cd9f8492a62511dcf160d633722309b04f4ad17c23e6d5
-
SHA512
05b36440ada6bee6592cb5c632f858dd7a7f42c098be462796c5bcb2461bea29d052e009f7dc46c08710d7aa0790fe6013fce3178025cff73625511e60083ca7
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaR+3:knmj6xK1y3Ik6TZGR4
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_add4688e30d4eca068cd9f8492a62511dcf160d633722309b04f4ad17c23e6d5.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB