Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
22-12-2024 20:57
General
-
Target
JaffaCakes118_79ec58a8a5480f3664f249ece4b47ee83e5c6d2bca9e434a2bdb0e4138e69bdf.dll
-
Size
490KB
-
MD5
94f3bfb5a4e0c85ae315afef13d6e99d
-
SHA1
620ca09c58d956bfd4ee8affa7e7229117a50e6d
-
SHA256
79ec58a8a5480f3664f249ece4b47ee83e5c6d2bca9e434a2bdb0e4138e69bdf
-
SHA512
585f6159962acb20939284dd89aa39e3c71e2675d59be38be3a4f60f8633021e78eb186194bcff86d187526735cbe2d8386135809067385870b07d35bd7f4c0c
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRA:knmj6xK1y3Ik6TZGRA
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_79ec58a8a5480f3664f249ece4b47ee83e5c6d2bca9e434a2bdb0e4138e69bdf.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB