Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
23-12-2024 13:44
General
-
Target
JaffaCakes118_45ebb147ced7392fafb2312c24d2a5dfcc696a1cf0b08d874d52437160d8c542.dll
-
Size
490KB
-
MD5
4e729e8258576dbd2ae2a747e60281af
-
SHA1
3f4591032f8c8216aee526a386983e2bea0e529d
-
SHA256
45ebb147ced7392fafb2312c24d2a5dfcc696a1cf0b08d874d52437160d8c542
-
SHA512
6e64c69b2cff7c92ab3ec5dc86170cca243088ad2d117a95a55ad1e19e3724441e9d91edb0f740fc1675ba301fdfeabda01bc155d7a1cef1e1e25de65f3f383d
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRY:knmj6xK1y3Ik6TZGRY
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_45ebb147ced7392fafb2312c24d2a5dfcc696a1cf0b08d874d52437160d8c542.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB