General

  • Target

    JaffaCakes118_3c8980ab450ac2f66e0971538a3f104cd4b7fffd5db493fa256172790ce533e2

  • Size

    184KB

  • Sample

    241222-jhq3fazjgx

  • MD5

    d00ea13bbfffd47ec3c9800136b08f79

  • SHA1

    fd13633bfb3435a6eed6d5e7711c8d6dae73da8f

  • SHA256

    3c8980ab450ac2f66e0971538a3f104cd4b7fffd5db493fa256172790ce533e2

  • SHA512

    63565f86bb7cb2c979ade9115ec2ab18f862925aa02c242a4b62def4fb1797df0bb921d45c106032d060d33187193415a8b3190afcbbe104e79d81d71f688a52

  • SSDEEP

    3072:3iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoylzoxss7:3iLVCIT4WK2z1W+CUHZj4Skq/eao4oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_3c8980ab450ac2f66e0971538a3f104cd4b7fffd5db493fa256172790ce533e2

    • Size

      184KB

    • MD5

      d00ea13bbfffd47ec3c9800136b08f79

    • SHA1

      fd13633bfb3435a6eed6d5e7711c8d6dae73da8f

    • SHA256

      3c8980ab450ac2f66e0971538a3f104cd4b7fffd5db493fa256172790ce533e2

    • SHA512

      63565f86bb7cb2c979ade9115ec2ab18f862925aa02c242a4b62def4fb1797df0bb921d45c106032d060d33187193415a8b3190afcbbe104e79d81d71f688a52

    • SSDEEP

      3072:3iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoylzoxss7:3iLVCIT4WK2z1W+CUHZj4Skq/eao4oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks