Analysis
-
max time kernel
143s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
22-12-2024 13:21
General
-
Target
JaffaCakes118_ba63fb9dc14521f74b1fe8315d43ff91b300c1aab117d83a0ea482aad73fa798.dll
-
Size
490KB
-
MD5
2cff1a41ac07d35395fb7348709ceef4
-
SHA1
ba1ee75ffeb359c3d46023942fe0e6adfe8fee3d
-
SHA256
ba63fb9dc14521f74b1fe8315d43ff91b300c1aab117d83a0ea482aad73fa798
-
SHA512
6f2d8fb04ae16d7ad6082fc00cacbeb7ae5ea975f835abca1c6905faf3838e6817708b346c322832d05df018dfc2b15bc2a6285647f5701bc03e5be48a8e80e2
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRc:knmj6xK1y3Ik6TZGRc
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_ba63fb9dc14521f74b1fe8315d43ff91b300c1aab117d83a0ea482aad73fa798.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB