General

  • Target

    JaffaCakes118_81a8ea360bbafb27712049ec2423279569f678ad34f507391d01f9f2b76db2f6

  • Size

    184KB

  • Sample

    241224-akjayawlht

  • MD5

    1b4b4e3a8c20aa5fcaaff457762446d8

  • SHA1

    221300b900553ea171948cf88fd440d34a6c4f4f

  • SHA256

    81a8ea360bbafb27712049ec2423279569f678ad34f507391d01f9f2b76db2f6

  • SHA512

    c9e7cd1454d46cfd246ee45d5d58c5e3a612edd40216a7c7fffebdce22de2665acf7f3cd4ce8dd217be4c3b165df50415bb162941c88e5c412dad02aa4e31060

  • SSDEEP

    3072:pJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Joa//2uFrSc:KfYOX+wTScR/Xzku9LVwLuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_81a8ea360bbafb27712049ec2423279569f678ad34f507391d01f9f2b76db2f6

    • Size

      184KB

    • MD5

      1b4b4e3a8c20aa5fcaaff457762446d8

    • SHA1

      221300b900553ea171948cf88fd440d34a6c4f4f

    • SHA256

      81a8ea360bbafb27712049ec2423279569f678ad34f507391d01f9f2b76db2f6

    • SHA512

      c9e7cd1454d46cfd246ee45d5d58c5e3a612edd40216a7c7fffebdce22de2665acf7f3cd4ce8dd217be4c3b165df50415bb162941c88e5c412dad02aa4e31060

    • SSDEEP

      3072:pJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Joa//2uFrSc:KfYOX+wTScR/Xzku9LVwLuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks