General

  • Target

    JaffaCakes118_3bda61f3d1ae178eb685301d4da34dcdcf432af76c3bc06d145f491ea10338b8

  • Size

    184KB

  • Sample

    241223-xgejxaxpbj

  • MD5

    fce158a5975d2fb3ffd1f854ee271547

  • SHA1

    286eff1949bf7a7ffa1cf51ad54029adf4db610c

  • SHA256

    3bda61f3d1ae178eb685301d4da34dcdcf432af76c3bc06d145f491ea10338b8

  • SHA512

    4a5d40e47cd20141de310b78ba323a1033f00730f80b41849e03985a199518102692461090b20e4b9c93aefd48c0b132164820a59d9a5832e87d9dea976cdf1b

  • SSDEEP

    3072:NJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jja//2uFrSc:2fYOX+wTScR/Xzku9LVwIuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_3bda61f3d1ae178eb685301d4da34dcdcf432af76c3bc06d145f491ea10338b8

    • Size

      184KB

    • MD5

      fce158a5975d2fb3ffd1f854ee271547

    • SHA1

      286eff1949bf7a7ffa1cf51ad54029adf4db610c

    • SHA256

      3bda61f3d1ae178eb685301d4da34dcdcf432af76c3bc06d145f491ea10338b8

    • SHA512

      4a5d40e47cd20141de310b78ba323a1033f00730f80b41849e03985a199518102692461090b20e4b9c93aefd48c0b132164820a59d9a5832e87d9dea976cdf1b

    • SSDEEP

      3072:NJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jja//2uFrSc:2fYOX+wTScR/Xzku9LVwIuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks