Analysis
-
max time kernel
141s -
max time network
131s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
10-08-2024 23:12
General
-
Target
880d560f45ee430ec7467e22736c243b_JaffaCakes118.exe
-
Size
144KB
-
MD5
880d560f45ee430ec7467e22736c243b
-
SHA1
d4e10ddf812d5d4d3f5ccd20957e3f5061b3ccf3
-
SHA256
7587a0de9292b7b865cba968ca09004ce66189eaef10027b3f492ebebd7e033e
-
SHA512
ee14016d6f4a7c6311daae29b7d15ecdcb98e53206139ad2d2be8ccf7195054a2c279e6b27451d3d51917fd364f367dd0594e12ef00d2ce3ec72a1b38c81a7a9
-
SSDEEP
3072:o7gvztPLHChSAxGBmkj6RFkFDWjPfsZBgylNpKndt:o7ckSco60FDWjP2BvlNp
Score
10/10
Malware Config
Extracted
Family
dridex
C2
104.131.7.40:443
128.199.247.176:1801
69.45.19.145:3889
95.211.148.20:1443
Signatures
-
Dridex
Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\880d560f45ee430ec7467e22736c243b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\880d560f45ee430ec7467e22736c243b_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
144KB
-
Filesize
24KB