Analysis
-
max time kernel
141s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
22-12-2024 09:13
General
-
Target
JaffaCakes118_ebbdf93f2300894a0b3fb25de166c33b3ccdc94eb52a289ceda3d3d9b00e02b5.dll
-
Size
490KB
-
MD5
69483c90ae6895d868630ea251c4614f
-
SHA1
39331ea00c26c0349c5356dc3c2c7dc416e466cb
-
SHA256
ebbdf93f2300894a0b3fb25de166c33b3ccdc94eb52a289ceda3d3d9b00e02b5
-
SHA512
0a23888ac40170df9b439f223eb668e5e6980d397a30b901d8626174be72826a80ab08c8cdd3b97165c4c2f5a76c6b2dc4831ea9027a42b40c9991afe0395127
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRq:knmj6xK1y3Ik6TZGRq
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_ebbdf93f2300894a0b3fb25de166c33b3ccdc94eb52a289ceda3d3d9b00e02b5.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB