General

  • Target

    JaffaCakes118_04f85b62768148c5772b7182671ed5b8379a0dfbc548aead6574fe3252060fd0

  • Size

    184KB

  • Sample

    241223-y51byszpdk

  • MD5

    5018e139f660e9d6b1d1234069271b8a

  • SHA1

    759db286317004ef4e292c7420afb4a77c98e91e

  • SHA256

    04f85b62768148c5772b7182671ed5b8379a0dfbc548aead6574fe3252060fd0

  • SHA512

    b25cb38754ce97ed4dbf089b15fe9d45451c09fd94270bd3e05bea4f4a7a62a20c4c077d8b60016735be7193dab7095cbb058445c62a1e9ef8779fce8d23eeec

  • SSDEEP

    3072:4JQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jia//2uFrSc:VfYOX+wTScR/Xzku9LVwhuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_04f85b62768148c5772b7182671ed5b8379a0dfbc548aead6574fe3252060fd0

    • Size

      184KB

    • MD5

      5018e139f660e9d6b1d1234069271b8a

    • SHA1

      759db286317004ef4e292c7420afb4a77c98e91e

    • SHA256

      04f85b62768148c5772b7182671ed5b8379a0dfbc548aead6574fe3252060fd0

    • SHA512

      b25cb38754ce97ed4dbf089b15fe9d45451c09fd94270bd3e05bea4f4a7a62a20c4c077d8b60016735be7193dab7095cbb058445c62a1e9ef8779fce8d23eeec

    • SSDEEP

      3072:4JQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jia//2uFrSc:VfYOX+wTScR/Xzku9LVwhuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks