General

  • Target

    JaffaCakes118_cc3d00f844dc79734246114104961acf8bb6624fc628ca89cab31c20e123e19e

  • Size

    184KB

  • Sample

    241229-1vrm6sxqfx

  • MD5

    c1af8ae7d6deff901a3e3da1eb3b3f88

  • SHA1

    edf71326976d2914864a7d57c53707a77db5c539

  • SHA256

    cc3d00f844dc79734246114104961acf8bb6624fc628ca89cab31c20e123e19e

  • SHA512

    1fd299f35d7b5cec7a39e0a70b7b45569daa281ef342fbf35cd080d994e64808bcd2c0d0679ec301ebc48faf469c4c9ba02c736452db29945c24f215699c1fed

  • SSDEEP

    3072:ziLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoilzoxss7:ziLVCIT4WK2z1W+CUHZj4Skq/eaoIoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_cc3d00f844dc79734246114104961acf8bb6624fc628ca89cab31c20e123e19e

    • Size

      184KB

    • MD5

      c1af8ae7d6deff901a3e3da1eb3b3f88

    • SHA1

      edf71326976d2914864a7d57c53707a77db5c539

    • SHA256

      cc3d00f844dc79734246114104961acf8bb6624fc628ca89cab31c20e123e19e

    • SHA512

      1fd299f35d7b5cec7a39e0a70b7b45569daa281ef342fbf35cd080d994e64808bcd2c0d0679ec301ebc48faf469c4c9ba02c736452db29945c24f215699c1fed

    • SSDEEP

      3072:ziLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoilzoxss7:ziLVCIT4WK2z1W+CUHZj4Skq/eaoIoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks