Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
22-12-2024 10:14
General
-
Target
JaffaCakes118_544897828234b8960cae193d11d36c933f4a17e58065aca0e6a01dccd5fd80b2.dll
-
Size
490KB
-
MD5
2d3368090f22fb3213786b31618c9245
-
SHA1
3e0b75bfc8b594a50c1458a9411420c5e8bf57be
-
SHA256
544897828234b8960cae193d11d36c933f4a17e58065aca0e6a01dccd5fd80b2
-
SHA512
beec47a732ec7f392822da969d9720e359dcb56641da778ce4a4aee939f5e8807b728534efbaa3402d4bcc437a687ce82b13398571a2102b632295da43b49387
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRh:knmj6xK1y3Ik6TZGRh
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_544897828234b8960cae193d11d36c933f4a17e58065aca0e6a01dccd5fd80b2.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB