Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
22-12-2024 17:49
General
-
Target
JaffaCakes118_93afeea8a35564d8cac40ee726576e021fabcee08ba4d24c833306d93f0eac95.dll
-
Size
490KB
-
MD5
aa0a91633811e6052b3c1a0b9e7b52e5
-
SHA1
13795ff52cdcc969f6a54093c7b0572a6c50e94d
-
SHA256
93afeea8a35564d8cac40ee726576e021fabcee08ba4d24c833306d93f0eac95
-
SHA512
e3bc7a9194c96372df4babf6ad3177c3a2eaa9fd2f9845c8f17d87c0da9695d1a93ad08c3d8ced802cccb6fe0e2d02cfbb7d4c0407abfd0a2914e6207e05878e
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRt:knmj6xK1y3Ik6TZGRt
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_93afeea8a35564d8cac40ee726576e021fabcee08ba4d24c833306d93f0eac95.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB