General

  • Target

    JaffaCakes118_86514424722db603070cbdfc08f025df32440fc9e10c637f50860aa8a73f9dc5

  • Size

    184KB

  • Sample

    241223-wma81awqgz

  • MD5

    a4834629fab49481b64f2cd76d7ddee8

  • SHA1

    7f7a3403afc38ab1cd47d4470245ccf2d89ddb3e

  • SHA256

    86514424722db603070cbdfc08f025df32440fc9e10c637f50860aa8a73f9dc5

  • SHA512

    9a8dd42baeb55d469eddc4695dae13c526d483a14c99ab29a0067ce05fb7c68c6a468a66fa0c4d8932eb797e2d68c817d3f6bdbaca64e807c0ce5d76926381f8

  • SSDEEP

    3072:mJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JKa//2uFrSc:PfYOX+wTScR/Xzku9LVwtuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_86514424722db603070cbdfc08f025df32440fc9e10c637f50860aa8a73f9dc5

    • Size

      184KB

    • MD5

      a4834629fab49481b64f2cd76d7ddee8

    • SHA1

      7f7a3403afc38ab1cd47d4470245ccf2d89ddb3e

    • SHA256

      86514424722db603070cbdfc08f025df32440fc9e10c637f50860aa8a73f9dc5

    • SHA512

      9a8dd42baeb55d469eddc4695dae13c526d483a14c99ab29a0067ce05fb7c68c6a468a66fa0c4d8932eb797e2d68c817d3f6bdbaca64e807c0ce5d76926381f8

    • SSDEEP

      3072:mJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JKa//2uFrSc:PfYOX+wTScR/Xzku9LVwtuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks