Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
23/12/2024, 21:51
General
-
Target
JaffaCakes118_bfec7f1bf2fcced20c3e949ba3b72683591c9c05473287ea3e2e76254b49b617.dll
-
Size
490KB
-
MD5
31c97b482faf8049c3461de9e9dba581
-
SHA1
a4657e3d8ea3ab6a4a6f4c2758ae493d943c0709
-
SHA256
bfec7f1bf2fcced20c3e949ba3b72683591c9c05473287ea3e2e76254b49b617
-
SHA512
9f2e8627ed085da35f61f45d7c16c9b5e425edd1792173a9622e5a27391e961560e127f691d0174f2201e14824145d8c6b1cca7f93b873dcce2866e5e64a3b4f
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaR6:knmj6xK1y3Ik6TZGR6
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_bfec7f1bf2fcced20c3e949ba3b72683591c9c05473287ea3e2e76254b49b617.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB