General

  • Target

    JaffaCakes118_c63aab5b14f9fb3da7703b6bd499e71ae49a82951614b27e2ecb147ae73e5b9a

  • Size

    184KB

  • Sample

    241230-116paatnd1

  • MD5

    7045a1c6bb32a9b71640c763c1380a81

  • SHA1

    3241ba38417b89e7b412f76c2ad52ae57bce9d7f

  • SHA256

    c63aab5b14f9fb3da7703b6bd499e71ae49a82951614b27e2ecb147ae73e5b9a

  • SHA512

    369fa038cfad295fb8ee6da7ae4cad36cb56da61ca626a74e5197902e9a4112d0cc70cec83505f884a90f9106a639afd460f7b5747506051f0326a6a2a64a010

  • SSDEEP

    3072:092qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTprLA:09NSMOEpQ1Q3ODAr+VJ

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_c63aab5b14f9fb3da7703b6bd499e71ae49a82951614b27e2ecb147ae73e5b9a

    • Size

      184KB

    • MD5

      7045a1c6bb32a9b71640c763c1380a81

    • SHA1

      3241ba38417b89e7b412f76c2ad52ae57bce9d7f

    • SHA256

      c63aab5b14f9fb3da7703b6bd499e71ae49a82951614b27e2ecb147ae73e5b9a

    • SHA512

      369fa038cfad295fb8ee6da7ae4cad36cb56da61ca626a74e5197902e9a4112d0cc70cec83505f884a90f9106a639afd460f7b5747506051f0326a6a2a64a010

    • SSDEEP

      3072:092qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTprLA:09NSMOEpQ1Q3ODAr+VJ

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks