Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
23-12-2024 21:03
General
-
Target
JaffaCakes118_06dbe566475d989734b1bcc02397a15650a18da058bd5f581f94b01d0d0a9f24.dll
-
Size
490KB
-
MD5
321d991f8b6d6a7561c59f55f42fdcd9
-
SHA1
305c927635b4d61893206def753f3a4eb32de37b
-
SHA256
06dbe566475d989734b1bcc02397a15650a18da058bd5f581f94b01d0d0a9f24
-
SHA512
b9f37addfb5c5dad23921d40c81d3861266bdec858d6dc999d79388b30abbf143439650cb6b2ff55cc66ba88e825a289caab6860339e86b170bc94d97817f143
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRD:knmj6xK1y3Ik6TZGRD
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_06dbe566475d989734b1bcc02397a15650a18da058bd5f581f94b01d0d0a9f24.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB