Analysis
-
max time kernel
142s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
22-12-2024 07:38
General
-
Target
JaffaCakes118_153dc8a9674ebfee399f96c40f23803019ef9c177c770d8d9dd2bb0e4c582a35.dll
-
Size
490KB
-
MD5
e7fbad19e8459e07cc65cee45d7023fa
-
SHA1
08352ae507413ccc912daa03ab5f0136a599c849
-
SHA256
153dc8a9674ebfee399f96c40f23803019ef9c177c770d8d9dd2bb0e4c582a35
-
SHA512
0f2c122a2d276e893abe0642c4bc5abe050717d33e109f1c7e8433c00f18deb9d400d2ab291b35780eb85434338ce75e1b69ca741dbbf26c1464c25e53817c31
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRs:knmj6xK1y3Ik6TZGRs
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_153dc8a9674ebfee399f96c40f23803019ef9c177c770d8d9dd2bb0e4c582a35.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB