Analysis
-
max time kernel
142s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
23-12-2024 13:43
General
-
Target
JaffaCakes118_baed493b25cd75af47fc10fd2842cf52af4533348428ceea7671b5db0b111463.dll
-
Size
490KB
-
MD5
0b5a92d090bec52c80012b8d007776e9
-
SHA1
6114b809a9eee01a73d49673dfa408b794809302
-
SHA256
baed493b25cd75af47fc10fd2842cf52af4533348428ceea7671b5db0b111463
-
SHA512
fa78777e11c965183eccc95518389c3ac39ab0f6ed2d8840e0bc38d330460826a726cdcb9f4118973a250f8724ad6f031b56461fff5cfc96b4453178e0f08bbf
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRo:knmj6xK1y3Ik6TZGRo
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_baed493b25cd75af47fc10fd2842cf52af4533348428ceea7671b5db0b111463.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB