General

  • Target

    JaffaCakes118_12eafa0232b1c67aa68e3eb892438186a40e2a203750f122592595675466c636

  • Size

    184KB

  • Sample

    241224-mjy18avpeq

  • MD5

    f3d190feab9e8fb021db1e5ec1a641f1

  • SHA1

    41d8d9b133fd4be01e152fb987098a78adca5cb0

  • SHA256

    12eafa0232b1c67aa68e3eb892438186a40e2a203750f122592595675466c636

  • SHA512

    3be5c59cfa0e69dd1459d0848773fc6acd89cc04593d8eb38b13365b7863b7d275a9ff26be70dd828de2e6de82b82925077b3b72eb1e4b365ec5d37815c5b40b

  • SSDEEP

    3072:iJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8J+a//2uFrSc:DfYOX+wTScR/Xzku9LVwZuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_12eafa0232b1c67aa68e3eb892438186a40e2a203750f122592595675466c636

    • Size

      184KB

    • MD5

      f3d190feab9e8fb021db1e5ec1a641f1

    • SHA1

      41d8d9b133fd4be01e152fb987098a78adca5cb0

    • SHA256

      12eafa0232b1c67aa68e3eb892438186a40e2a203750f122592595675466c636

    • SHA512

      3be5c59cfa0e69dd1459d0848773fc6acd89cc04593d8eb38b13365b7863b7d275a9ff26be70dd828de2e6de82b82925077b3b72eb1e4b365ec5d37815c5b40b

    • SSDEEP

      3072:iJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8J+a//2uFrSc:DfYOX+wTScR/Xzku9LVwZuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks