General

  • Target

    JaffaCakes118_dcb8c7a4d950a20b5dce2c6aa306a6739640e8adf99db921bf8db330ac688dc0

  • Size

    184KB

  • Sample

    241223-2avprstkdx

  • MD5

    ad081bef3864d5e1d77eebf919742fa2

  • SHA1

    16630d03a07783225c8992b92eac2116fb155193

  • SHA256

    dcb8c7a4d950a20b5dce2c6aa306a6739640e8adf99db921bf8db330ac688dc0

  • SHA512

    08d899e158ce9f3f53cae6db57adf3a00676cb2cfcb66d20f5acfbc3fb1d8a774a05b11536756b6ebc95fd071b23b46c26ac7b40c56abfc5cd839e76924bd27b

  • SSDEEP

    3072:5JQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jla//2uFrSc:6fYOX+wTScR/Xzku9LVweuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_dcb8c7a4d950a20b5dce2c6aa306a6739640e8adf99db921bf8db330ac688dc0

    • Size

      184KB

    • MD5

      ad081bef3864d5e1d77eebf919742fa2

    • SHA1

      16630d03a07783225c8992b92eac2116fb155193

    • SHA256

      dcb8c7a4d950a20b5dce2c6aa306a6739640e8adf99db921bf8db330ac688dc0

    • SHA512

      08d899e158ce9f3f53cae6db57adf3a00676cb2cfcb66d20f5acfbc3fb1d8a774a05b11536756b6ebc95fd071b23b46c26ac7b40c56abfc5cd839e76924bd27b

    • SSDEEP

      3072:5JQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jla//2uFrSc:6fYOX+wTScR/Xzku9LVweuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks