Analysis
-
max time kernel
143s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
22-12-2024 07:59
General
-
Target
JaffaCakes118_3d14b9ad157dc70a412671d907568c4286386abcc289b0769155f0168e34ffd2.dll
-
Size
490KB
-
MD5
3d0623419961958c1a1d41ca6385912e
-
SHA1
7a0628aed6e8e40dacbb304644dbfe5a39cba4c3
-
SHA256
3d14b9ad157dc70a412671d907568c4286386abcc289b0769155f0168e34ffd2
-
SHA512
40608a785d4b4c93b80d84bcc10d7b7c7612af1e49a43518deaffd9f3c9f2990d401b3ac93fbeb009049f307d7e624951b19549e7355ff2bba02cec48096f628
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaR2:knmj6xK1y3Ik6TZGR2
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_3d14b9ad157dc70a412671d907568c4286386abcc289b0769155f0168e34ffd2.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB