Analysis
-
max time kernel
141s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
22-12-2024 18:44
General
-
Target
JaffaCakes118_64042b6f60e207244342c686cb3c5a9095e980283c1cc0add39211060b3882e8.dll
-
Size
490KB
-
MD5
77b663caee1b6d6ce177356ece1effcc
-
SHA1
90dc7cdd3abe9f2d9c232cbcfabf4e66bff7773e
-
SHA256
64042b6f60e207244342c686cb3c5a9095e980283c1cc0add39211060b3882e8
-
SHA512
f70616aac11a8fad2e5825abe07060e8417d5564a3d0ea0b43d64e6faa050a091fb53f921926d72d1b9d12f8ee5c17ab4f7e2945590ffbc0cd425be04318d6e7
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaR4:knmj6xK1y3Ik6TZGR4
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_64042b6f60e207244342c686cb3c5a9095e980283c1cc0add39211060b3882e8.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB