Analysis
-
max time kernel
142s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
23/12/2024, 15:12
General
-
Target
JaffaCakes118_9bda7f9dcb447f59597c38fc8e44434558314c6244903759bfc1bbae28d4e7a0.dll
-
Size
490KB
-
MD5
381ce02db51a9bad6ecd81eaf69694a1
-
SHA1
cc86115cd1e779b249eb278e42fbe9a73457c6ce
-
SHA256
9bda7f9dcb447f59597c38fc8e44434558314c6244903759bfc1bbae28d4e7a0
-
SHA512
7214e9d4e98d29edab5035461aeba6a510729dba2f3b5fa54ed3530429360c2149b56ce0e2371b2f1be669af5bf1bf94c06f967319ac46ebca135810ff69c3d3
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRx:knmj6xK1y3Ik6TZGRx
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_9bda7f9dcb447f59597c38fc8e44434558314c6244903759bfc1bbae28d4e7a0.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB