General

  • Target

    JaffaCakes118_7d2c4803fc7483a2374881991fa5303458874f9ead58d925364b227df84be2d3

  • Size

    184KB

  • Sample

    241223-vbpftavpbv

  • MD5

    63e0d7fb72e4f3e28df39f7f8863d385

  • SHA1

    eb69f52abf0991cbcc62fd9072d264a4dd591b6f

  • SHA256

    7d2c4803fc7483a2374881991fa5303458874f9ead58d925364b227df84be2d3

  • SHA512

    c6ee5e69284ded93c0d90d8416bc1597f638909a215a63594f9d59c1cf98e6298f1910ff12cdeca457db19a743b55f310f0f7b81ec921baad143f291d74d7794

  • SSDEEP

    3072:eJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jka//2uFrSc:nfYOX+wTScR/Xzku9LVwvuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_7d2c4803fc7483a2374881991fa5303458874f9ead58d925364b227df84be2d3

    • Size

      184KB

    • MD5

      63e0d7fb72e4f3e28df39f7f8863d385

    • SHA1

      eb69f52abf0991cbcc62fd9072d264a4dd591b6f

    • SHA256

      7d2c4803fc7483a2374881991fa5303458874f9ead58d925364b227df84be2d3

    • SHA512

      c6ee5e69284ded93c0d90d8416bc1597f638909a215a63594f9d59c1cf98e6298f1910ff12cdeca457db19a743b55f310f0f7b81ec921baad143f291d74d7794

    • SSDEEP

      3072:eJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jka//2uFrSc:nfYOX+wTScR/Xzku9LVwvuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks