Analysis
-
max time kernel
142s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
22-12-2024 12:41
General
-
Target
JaffaCakes118_24ef2e2d816f880e5a90c85ebea7002b9ad9c9aafee0d061c7997e60bb3e7134.dll
-
Size
490KB
-
MD5
3d2014610b897f4000227f4e048edbfa
-
SHA1
f029c2cf980a49624a3f42c9e03e3d0d7dd5bb8b
-
SHA256
24ef2e2d816f880e5a90c85ebea7002b9ad9c9aafee0d061c7997e60bb3e7134
-
SHA512
73cdccd11adc9ed8fcdc5f8313dc262eb9bdca50fea4bbec1ab756499e90e2d4a6a6bb9a9bd45f5ce9b16e08991821c02fcdb9ec07f214846401185fb23b6e2d
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRl:knmj6xK1y3Ik6TZGRl
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_24ef2e2d816f880e5a90c85ebea7002b9ad9c9aafee0d061c7997e60bb3e7134.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB