Analysis
-
max time kernel
149s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
22-12-2024 10:51
General
-
Target
JaffaCakes118_62b97096082d3d843c28c38455dce209e2dd2df5a986c0f12ea0d58f6cea3ca8.dll
-
Size
490KB
-
MD5
ed78857093f3dd2775ea3400caa0424c
-
SHA1
ceee7afaa07677f12a71f71c93a31ade22ff2de4
-
SHA256
62b97096082d3d843c28c38455dce209e2dd2df5a986c0f12ea0d58f6cea3ca8
-
SHA512
8c8b2c1235d7c2cb5afdb8388b7512382798bbc516cc2ff393d8eced7be3a5a061c500693cfa14ea35a4ecfeb807ed7bce7659d6d39c1418d35971a491d8eb44
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRi:knmj6xK1y3Ik6TZGRi
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_62b97096082d3d843c28c38455dce209e2dd2df5a986c0f12ea0d58f6cea3ca8.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB