Analysis
-
max time kernel
142s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
23-12-2024 13:41
General
-
Target
JaffaCakes118_4f809ddde7a44a29df4ea1e178c152d61dd467fb3436589f5f385fc9163cbfff.dll
-
Size
490KB
-
MD5
cd68e98da760c259b305708af9dec1e1
-
SHA1
e77474e9de1f64f5e67b6d6f8596029eea359580
-
SHA256
4f809ddde7a44a29df4ea1e178c152d61dd467fb3436589f5f385fc9163cbfff
-
SHA512
9ad55a0abaa14a75877c91933b55a721de0447704c3fa2efc175f3b2313256e02f5f649a4abe7c4d5b530a5aca5afdb5569dcebd75a92e06cb09217bd9f20fee
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRU:knmj6xK1y3Ik6TZGRU
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_4f809ddde7a44a29df4ea1e178c152d61dd467fb3436589f5f385fc9163cbfff.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB