General

  • Target

    JaffaCakes118_63481571f4852f642b2c0b4eb695bdacc57dc51d87de7010163c1c5ceca58604

  • Size

    184KB

  • Sample

    241223-wr4fcawrhn

  • MD5

    0f416be3b2e91c449f6089ffd538aa94

  • SHA1

    3b2a41123c7c89ccc6da4df3cc53365264642d73

  • SHA256

    63481571f4852f642b2c0b4eb695bdacc57dc51d87de7010163c1c5ceca58604

  • SHA512

    8956a9559c81ddeec8cf47fa697194b5d16b0d22f68dbba37cd015a7f36368d12a90e64f04bf7c64b18074af5c6ca6074b5b4143134e7c198753591e07ff9118

  • SSDEEP

    3072:wJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jwa//2uFrSc:NfYOX+wTScR/Xzku9LVwruG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_63481571f4852f642b2c0b4eb695bdacc57dc51d87de7010163c1c5ceca58604

    • Size

      184KB

    • MD5

      0f416be3b2e91c449f6089ffd538aa94

    • SHA1

      3b2a41123c7c89ccc6da4df3cc53365264642d73

    • SHA256

      63481571f4852f642b2c0b4eb695bdacc57dc51d87de7010163c1c5ceca58604

    • SHA512

      8956a9559c81ddeec8cf47fa697194b5d16b0d22f68dbba37cd015a7f36368d12a90e64f04bf7c64b18074af5c6ca6074b5b4143134e7c198753591e07ff9118

    • SSDEEP

      3072:wJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jwa//2uFrSc:NfYOX+wTScR/Xzku9LVwruG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks