General

  • Target

    JaffaCakes118_363b6e83f5ca8f8c985d6723caa2172fe718114c53b12ea72e3ae3420f41f633

  • Size

    184KB

  • Sample

    241223-wq65vawrex

  • MD5

    3b3739c7986ac50c4322ce32d4697789

  • SHA1

    7c546a3249f1027ccad55a46730c768479110a30

  • SHA256

    363b6e83f5ca8f8c985d6723caa2172fe718114c53b12ea72e3ae3420f41f633

  • SHA512

    95b9eee16b90703fea98fb4aa3d11e3e9cfd87d105784dc07714446459950cd5f9129cf83f2a6a43f3bbe0176c47f4f9d8f10e62d1f2a5c1df2324b4710f52a1

  • SSDEEP

    3072:SJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jba//2uFrSc:TfYOX+wTScR/Xzku9LVw0uG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_363b6e83f5ca8f8c985d6723caa2172fe718114c53b12ea72e3ae3420f41f633

    • Size

      184KB

    • MD5

      3b3739c7986ac50c4322ce32d4697789

    • SHA1

      7c546a3249f1027ccad55a46730c768479110a30

    • SHA256

      363b6e83f5ca8f8c985d6723caa2172fe718114c53b12ea72e3ae3420f41f633

    • SHA512

      95b9eee16b90703fea98fb4aa3d11e3e9cfd87d105784dc07714446459950cd5f9129cf83f2a6a43f3bbe0176c47f4f9d8f10e62d1f2a5c1df2324b4710f52a1

    • SSDEEP

      3072:SJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jba//2uFrSc:TfYOX+wTScR/Xzku9LVw0uG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks