Analysis
-
max time kernel
140s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
24/12/2024, 01:13
General
-
Target
JaffaCakes118_ef61cde30ca49b1c9060d3d424b3532e5b24460e4a04d8cfc1f5f343b166f4be.dll
-
Size
490KB
-
MD5
7804018416e3d953c0462ab5b98448df
-
SHA1
d5d35ac861fccc25d81cc999f6b15b761a6b9b69
-
SHA256
ef61cde30ca49b1c9060d3d424b3532e5b24460e4a04d8cfc1f5f343b166f4be
-
SHA512
24f0a5db9818f3bd7f936d2323578494825d0479d63bc210af866673964ba6fed937e6cb40e2da0dab040b545821fc22411fa6a342ca7a737c3a94eb5e6a464c
-
SSDEEP
12288:mFnmEQb6xK6EOcEELeBdUDBBe6pLtzPhGHUaRD:knmj6xK1y3Ik6TZGRD
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3467965077
C2
firenicatrible.com
Signatures
-
IcedID, BokBot
IcedID is a banking trojan capable of stealing credentials.
-
Icedid family
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_ef61cde30ca49b1c9060d3d424b3532e5b24460e4a04d8cfc1f5f343b166f4be.dll1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB