Analysis
-
max time kernel
120s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
23-12-2024 12:33
General
-
Target
JaffaCakes118_96bbed3cef8ed674e9bf12fcefd8eca119d682b405ea9a3c833b89cfb9c7554c.dll
-
Size
80KB
-
MD5
9e29f923b58fdf528bd1cf9c39198059
-
SHA1
deadf64a82630e87f21e4859ae70ed43a8380122
-
SHA256
96bbed3cef8ed674e9bf12fcefd8eca119d682b405ea9a3c833b89cfb9c7554c
-
SHA512
0d6158e1747f06da205c4cb05495d1c8cf76c0120f74a56cfc5ef9438ba80403c7e5308420fb11e438a2386ee7d8c3a14d5a86ee6bc8dd87301b5e5d2d0e25e3
-
SSDEEP
768:pWadwr+b2aikC6DwLUslDgXBpH/zuVQX9pzvjU4YqsABzktk42mWhlzS8q:75ikC6DwLUHfzDX9JU4YK83Az9
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
358151332
C2
azorropulseee.fun
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
IcedID First Stage Loader 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_96bbed3cef8ed674e9bf12fcefd8eca119d682b405ea9a3c833b89cfb9c7554c.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
28KB
-
Filesize
28KB