Analysis
-
max time kernel
140s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
23/12/2024, 21:47
General
-
Target
JaffaCakes118_5fe546cd3f5ba82209b282f1aba6d563299772d5d2c706dd043135621feaaa91.dll
-
Size
490KB
-
MD5
3a82232b857d0eae197ce4e6b76f4c6e
-
SHA1
150757d8543a56004f140c6e248f59b9bd2614d6
-
SHA256
5fe546cd3f5ba82209b282f1aba6d563299772d5d2c706dd043135621feaaa91
-
SHA512
dc8422df375d8e2627e09c4a64e872693a0994d42905255277fd902498c798d0bb112429f35d01c52b202ea221be6ddf58a4b21a3a907080eaf494809ed44f29
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRp:knmj6xK1y3Ik6TZGRp
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_5fe546cd3f5ba82209b282f1aba6d563299772d5d2c706dd043135621feaaa91.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB