Analysis
-
max time kernel
141s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
23-12-2024 13:05
General
-
Target
JaffaCakes118_389a13789d5f9ce3eb71a63c83f6a9a84693a6ad8f602a32c65431367995a4ac.dll
-
Size
490KB
-
MD5
74f3ff9d89b55946ee2f26bee692adb6
-
SHA1
059ead0937672ae93735c0c31ff5d32fd51231f5
-
SHA256
389a13789d5f9ce3eb71a63c83f6a9a84693a6ad8f602a32c65431367995a4ac
-
SHA512
2a6279362d3331ea07c63973cb86b0f787b8f88f150a091950c9d1f02a1cadb42938cc0a0b67d67a8eddae2a26671cd6f9201c607772682fe0a2c8c46f224a50
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaR2:knmj6xK1y3Ik6TZGR2
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_389a13789d5f9ce3eb71a63c83f6a9a84693a6ad8f602a32c65431367995a4ac.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB