Analysis
-
max time kernel
149s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
23-12-2024 18:36
General
-
Target
JaffaCakes118_1f92058f5037ed14caf6f4abf9af928b67fe6f6cf6bcdb0d461e9e9a346a19e3.dll
-
Size
490KB
-
MD5
aeb9abb15433574f5a190d997f7ceaf9
-
SHA1
ee4561af69212483ed894833c97e22c435dd7559
-
SHA256
1f92058f5037ed14caf6f4abf9af928b67fe6f6cf6bcdb0d461e9e9a346a19e3
-
SHA512
9d77e8417d9ca5bf565485e4821a62d57b55d7c26e65f119efff8fe3d07aadd3eef2974387c8b8a0ea9e403d75a5f00043a8ed723edc9f7dfa9a2dc557e51863
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRI:knmj6xK1y3Ik6TZGRI
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_1f92058f5037ed14caf6f4abf9af928b67fe6f6cf6bcdb0d461e9e9a346a19e3.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB