General

  • Target

    5311dcbf78d7dcac89c2557095595f4f_JaffaCakes118

  • Size

    184KB

  • Sample

    241017-w3jkbaydma

  • MD5

    5311dcbf78d7dcac89c2557095595f4f

  • SHA1

    a5a64baed65ac713a717c3096a521598130a1c77

  • SHA256

    ceec0ff35d3b1f525c0e4c6bc25e6758a59c8d3133e2f1c6089debc7985c27c8

  • SHA512

    e4c743d3d66669c03ec5bc8c60e570c46c89b4758fddbd9cbc0f8bb20e3512d1ffc6d88e3f5f8684d01f99c3150d09bb540fa56f4e94c357b4c2ebb00c8152f5

  • SSDEEP

    3072:h1JzSxp5PpRh7phfrv/6jC5KHWnzD7xC3/o1WXDCFUBUL1iMhmDEwmuFWwyF:h1JGz5pX7fz+C5kUzDA36bFUc1i7EwRu

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      5311dcbf78d7dcac89c2557095595f4f_JaffaCakes118

    • Size

      184KB

    • MD5

      5311dcbf78d7dcac89c2557095595f4f

    • SHA1

      a5a64baed65ac713a717c3096a521598130a1c77

    • SHA256

      ceec0ff35d3b1f525c0e4c6bc25e6758a59c8d3133e2f1c6089debc7985c27c8

    • SHA512

      e4c743d3d66669c03ec5bc8c60e570c46c89b4758fddbd9cbc0f8bb20e3512d1ffc6d88e3f5f8684d01f99c3150d09bb540fa56f4e94c357b4c2ebb00c8152f5

    • SSDEEP

      3072:h1JzSxp5PpRh7phfrv/6jC5KHWnzD7xC3/o1WXDCFUBUL1iMhmDEwmuFWwyF:h1JGz5pX7fz+C5kUzDA36bFUc1i7EwRu

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks