Analysis
-
max time kernel
140s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
23/12/2024, 23:19
General
-
Target
JaffaCakes118_59edb7f8ff105c4425405da0bcb8af82c78d33e6b071ab3913c56c7dacc39201.dll
-
Size
490KB
-
MD5
a57726626d66b4b61493f7a05f047aff
-
SHA1
50fe3bf49bad8cf946bd3972c0e38246275dbda1
-
SHA256
59edb7f8ff105c4425405da0bcb8af82c78d33e6b071ab3913c56c7dacc39201
-
SHA512
b30d549c152b9623b60604cc94ea02aefa7c1509a0466ed3a343533d267962b5a7e41584284f594a3ff652c315d071bcbd4f97b0f3042846a27f9731d4eb26bf
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRrN:knmj6xK1y3Ik6TZGRZ
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_59edb7f8ff105c4425405da0bcb8af82c78d33e6b071ab3913c56c7dacc39201.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB