General

  • Target

    JaffaCakes118_75965409f4da5316696878d707d0215a8e3e350a5556747ae16e6afe67611f0d

  • Size

    184KB

  • Sample

    241223-wwwajaxjfs

  • MD5

    f404b2f951dbd418379332742e990c6a

  • SHA1

    791ba7c8b09b4330a4541e7222010dfe3bf13d17

  • SHA256

    75965409f4da5316696878d707d0215a8e3e350a5556747ae16e6afe67611f0d

  • SHA512

    3726bdae2b50a6e510f16176d4421233fd6111dfba4d3768f0f73e3bed51cc42a304aac4ebb29c78a58d6aaa37d01e496c5726b73727c748453fb3e45da8f5e3

  • SSDEEP

    3072:vJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JDa//2uFrSc:8fYOX+wTScR/Xzku9LVwQuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_75965409f4da5316696878d707d0215a8e3e350a5556747ae16e6afe67611f0d

    • Size

      184KB

    • MD5

      f404b2f951dbd418379332742e990c6a

    • SHA1

      791ba7c8b09b4330a4541e7222010dfe3bf13d17

    • SHA256

      75965409f4da5316696878d707d0215a8e3e350a5556747ae16e6afe67611f0d

    • SHA512

      3726bdae2b50a6e510f16176d4421233fd6111dfba4d3768f0f73e3bed51cc42a304aac4ebb29c78a58d6aaa37d01e496c5726b73727c748453fb3e45da8f5e3

    • SSDEEP

      3072:vJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JDa//2uFrSc:8fYOX+wTScR/Xzku9LVwQuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks