General

  • Target

    JaffaCakes118_5789c8a03079ea4b6b2b2b17d570157896ee25320d2e54e80c29d91b73332de1

  • Size

    184KB

  • Sample

    241230-1c46jszkfm

  • MD5

    8b667700acf3ed76a38503071889c9b5

  • SHA1

    41d6c0d457bb87b096013279fb24354f07c50f90

  • SHA256

    5789c8a03079ea4b6b2b2b17d570157896ee25320d2e54e80c29d91b73332de1

  • SHA512

    50e736f45b4c977f666f9d7634c9ac031d3c069c0dbd78f9a85c439a7a5934c07be33812f393a7d9ae13bdd3b3a999ad60ec2a81a6122bdb79449810449cfeda

  • SSDEEP

    3072:FJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jka//2uFrSc:ufYOX+wTScR/Xzku9LVwvuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_5789c8a03079ea4b6b2b2b17d570157896ee25320d2e54e80c29d91b73332de1

    • Size

      184KB

    • MD5

      8b667700acf3ed76a38503071889c9b5

    • SHA1

      41d6c0d457bb87b096013279fb24354f07c50f90

    • SHA256

      5789c8a03079ea4b6b2b2b17d570157896ee25320d2e54e80c29d91b73332de1

    • SHA512

      50e736f45b4c977f666f9d7634c9ac031d3c069c0dbd78f9a85c439a7a5934c07be33812f393a7d9ae13bdd3b3a999ad60ec2a81a6122bdb79449810449cfeda

    • SSDEEP

      3072:FJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jka//2uFrSc:ufYOX+wTScR/Xzku9LVwvuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks