Analysis
-
max time kernel
141s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
22-12-2024 10:22
General
-
Target
JaffaCakes118_e1d9d8eb11aea35cf970800bc855ab7a5d7b4e6bbe84af195f353d01cb5a7cfa.dll
-
Size
490KB
-
MD5
108ba0545d35dc53c664e4d66ec8ab67
-
SHA1
e05dc266504c1c6842afd8d1e3e12b2117290584
-
SHA256
e1d9d8eb11aea35cf970800bc855ab7a5d7b4e6bbe84af195f353d01cb5a7cfa
-
SHA512
44543f15352c79ebaabe817f2bf1fe2ae9ac1f67edcb141e455f5178640d249bc88032caea9f46f42940c7273a308f067ba7056f8c070155c225b06810124d2c
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaR4c:knmj6xK1y3Ik6TZGR4c
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e1d9d8eb11aea35cf970800bc855ab7a5d7b4e6bbe84af195f353d01cb5a7cfa.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB