Analysis
-
max time kernel
141s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
22-12-2024 18:12
General
-
Target
JaffaCakes118_dc76fa1c34ef78f9e42aba22b34206a46b72c2148b27f98f76d099aaf3009e8e.dll
-
Size
490KB
-
MD5
e097376cfb1005d4b08e15ddc5a5de54
-
SHA1
7c09f3b95d208d87e5e25068ae7ce5dab75839e8
-
SHA256
dc76fa1c34ef78f9e42aba22b34206a46b72c2148b27f98f76d099aaf3009e8e
-
SHA512
c1715140523ecfccc505e0c11a464d1fb8cd87b7b19190d5e0b0c9bd25986697f657238a8e33d5c1859507d858f229a3b7e91c4d6fe92e45fdbd89d539ba20b7
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRu:knmj6xK1y3Ik6TZGRu
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_dc76fa1c34ef78f9e42aba22b34206a46b72c2148b27f98f76d099aaf3009e8e.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB