Analysis
-
max time kernel
144s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
22-12-2024 07:42
General
-
Target
JaffaCakes118_d264d4da037e920378a5b404936115d2354dce973373309d2c2eb4588f4ac159.dll
-
Size
490KB
-
MD5
b938b25cb9276085a5d98f7617e6b256
-
SHA1
062a3ffb6f252587a0c385a5ed0132c28ded063f
-
SHA256
d264d4da037e920378a5b404936115d2354dce973373309d2c2eb4588f4ac159
-
SHA512
1962869a2c72c955df1a18e89672b2c98e76ea74158bd528c2126da36514e19b5203cc19fa50686ae3a486d3fc59f480fdd6fbb0005e4161f92b516034f16c8d
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRM:knmj6xK1y3Ik6TZGRM
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_d264d4da037e920378a5b404936115d2354dce973373309d2c2eb4588f4ac159.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB