General

  • Target

    JaffaCakes118_ed438c8720662cf6b4c87da9eff0fa141b922938215273d31aeffb6cfb869480

  • Size

    184KB

  • Sample

    241224-amcwyawmcz

  • MD5

    77b00e909616f216662e77e6813928b6

  • SHA1

    c633b2e0ece619173428d3584f4520103b9396e4

  • SHA256

    ed438c8720662cf6b4c87da9eff0fa141b922938215273d31aeffb6cfb869480

  • SHA512

    5e78ae14f0974a4aa031d3e19ee723ba02229e1bd3daff3c3c7410e74f8c58f92f12f7a999e30ea37e2004756aa05f6425fc3d30d36f405235cd49626821850b

  • SSDEEP

    3072:KJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Joa//2uFrSc:LfYOX+wTScR/Xzku9LVwzuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_ed438c8720662cf6b4c87da9eff0fa141b922938215273d31aeffb6cfb869480

    • Size

      184KB

    • MD5

      77b00e909616f216662e77e6813928b6

    • SHA1

      c633b2e0ece619173428d3584f4520103b9396e4

    • SHA256

      ed438c8720662cf6b4c87da9eff0fa141b922938215273d31aeffb6cfb869480

    • SHA512

      5e78ae14f0974a4aa031d3e19ee723ba02229e1bd3daff3c3c7410e74f8c58f92f12f7a999e30ea37e2004756aa05f6425fc3d30d36f405235cd49626821850b

    • SSDEEP

      3072:KJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Joa//2uFrSc:LfYOX+wTScR/Xzku9LVwzuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks