General

  • Target

    JaffaCakes118_f789228b26d33fd34e4d088248a5e403c3bfb25097767ff6d908336ee672feb1

  • Size

    184KB

  • Sample

    241224-beqcqsxkhs

  • MD5

    36ac0b2d688437bdecd5147d93842380

  • SHA1

    e044f7f5d619cbf058f88289a7d0d29704f9ca14

  • SHA256

    f789228b26d33fd34e4d088248a5e403c3bfb25097767ff6d908336ee672feb1

  • SHA512

    ba41797918be90e5deba5d53e80e32d1b5694d3dd0aa3b57e139f3c3a53cf6a13ccef6f27fb56058e0ab0b907e2773ea71a1effda0f512cb4f26a3d77ff24f34

  • SSDEEP

    3072:vJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jma//2uFrSc:8fYOX+wTScR/Xzku9LVwJuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_f789228b26d33fd34e4d088248a5e403c3bfb25097767ff6d908336ee672feb1

    • Size

      184KB

    • MD5

      36ac0b2d688437bdecd5147d93842380

    • SHA1

      e044f7f5d619cbf058f88289a7d0d29704f9ca14

    • SHA256

      f789228b26d33fd34e4d088248a5e403c3bfb25097767ff6d908336ee672feb1

    • SHA512

      ba41797918be90e5deba5d53e80e32d1b5694d3dd0aa3b57e139f3c3a53cf6a13ccef6f27fb56058e0ab0b907e2773ea71a1effda0f512cb4f26a3d77ff24f34

    • SSDEEP

      3072:vJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jma//2uFrSc:8fYOX+wTScR/Xzku9LVwJuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks