Analysis
-
max time kernel
141s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
23-12-2024 18:48
General
-
Target
JaffaCakes118_aca1033916f83ac55e52287e82e61513d14f10ca5a3bde6b5efd3d85d126ba4a.dll
-
Size
490KB
-
MD5
b2e6dec7c5656df3f9770673551a80ab
-
SHA1
3f70e6f25a04864119fbb9931928cf16eb8721fc
-
SHA256
aca1033916f83ac55e52287e82e61513d14f10ca5a3bde6b5efd3d85d126ba4a
-
SHA512
dfed58eb6a39a0d5255678dcf260feac714e984c87ff687c11f53ddea2297037067a6002351f68f2e12f72a5940aeb5517871de90e531fa4a2dc6893df62482d
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRm:knmj6xK1y3Ik6TZGRm
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_aca1033916f83ac55e52287e82e61513d14f10ca5a3bde6b5efd3d85d126ba4a.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB