Analysis
-
max time kernel
141s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
22-12-2024 10:59
General
-
Target
JaffaCakes118_8da74f88f5af5820261be3f0121e4ffbf12d7595ae6c6b52a7afdc227c21f39b.dll
-
Size
490KB
-
MD5
71bffcb0380e619027beb8b748ab8484
-
SHA1
4deee37aba68e7f9d622923ac7a0e5fb9e3411f2
-
SHA256
8da74f88f5af5820261be3f0121e4ffbf12d7595ae6c6b52a7afdc227c21f39b
-
SHA512
20c69b76c3f16329eb094c8f1d96ac76edadb36a60bf66342f1ad972a4e5130a3f7c680eb9a17c2d21ab1fd1bdb16b65d7b24ff7a00fbb96b40ab1e0fd2b5c3c
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRJ:knmj6xK1y3Ik6TZGRJ
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_8da74f88f5af5820261be3f0121e4ffbf12d7595ae6c6b52a7afdc227c21f39b.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB