General

  • Target

    JaffaCakes118_3003cfc2af7c75d12bf10fd7b6fca86d317e3c4f4bebfd227c292a6e730c44e7

  • Size

    184KB

  • Sample

    241230-1bawbazjeq

  • MD5

    2b99c818770d279ed4cca1bea5772621

  • SHA1

    baf7ca29ba98ab4c8e8a618de14087f92bfa9b69

  • SHA256

    3003cfc2af7c75d12bf10fd7b6fca86d317e3c4f4bebfd227c292a6e730c44e7

  • SHA512

    86dd892cf294f66df0f58ed03ec053ea891aa7b31e10179d80dab5178c2f28b05c7829113b0e26d763af60394e2fd2d79d71168a6fb8282bca3ecf09f35b6717

  • SSDEEP

    3072:d92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMT2rLA:d9NSMOEpQ1Q3ODAr+VK

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_3003cfc2af7c75d12bf10fd7b6fca86d317e3c4f4bebfd227c292a6e730c44e7

    • Size

      184KB

    • MD5

      2b99c818770d279ed4cca1bea5772621

    • SHA1

      baf7ca29ba98ab4c8e8a618de14087f92bfa9b69

    • SHA256

      3003cfc2af7c75d12bf10fd7b6fca86d317e3c4f4bebfd227c292a6e730c44e7

    • SHA512

      86dd892cf294f66df0f58ed03ec053ea891aa7b31e10179d80dab5178c2f28b05c7829113b0e26d763af60394e2fd2d79d71168a6fb8282bca3ecf09f35b6717

    • SSDEEP

      3072:d92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMT2rLA:d9NSMOEpQ1Q3ODAr+VK

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks