Analysis
-
max time kernel
141s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
23-12-2024 13:28
General
-
Target
JaffaCakes118_a6a53e62d5a8902a5ad0e5025540772ce440b60cba12a0795e8bba09714401d9.dll
-
Size
490KB
-
MD5
ee34b6d2d3e57818434e5c088d97d7b8
-
SHA1
9d9fda853700e52f0176df5c3c90a327a9ed80e9
-
SHA256
a6a53e62d5a8902a5ad0e5025540772ce440b60cba12a0795e8bba09714401d9
-
SHA512
769251883a894d8aa144072cf674969efc9d6e36e7eb78754e8a6825008a433f2d2662944d588a3e5a9c5c8ab17dc2c6d74ab04d95a6a5e6d1d342e40bf3e6d8
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRz:knmj6xK1y3Ik6TZGRz
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_a6a53e62d5a8902a5ad0e5025540772ce440b60cba12a0795e8bba09714401d9.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB