General

  • Target

    JaffaCakes118_0b9617b6b7a82e0297d3291e013fa9961438672bf04dddedf5dbc126cb07c239

  • Size

    184KB

  • Sample

    241230-1caa6szkcm

  • MD5

    3a651937f9ee2fffa99857e650fd3fa8

  • SHA1

    fd47d2ceb718582220ae2479a546ccd648f17137

  • SHA256

    0b9617b6b7a82e0297d3291e013fa9961438672bf04dddedf5dbc126cb07c239

  • SHA512

    fbcd5833667d1aa459c1f823684725480659db5be476954882a680aae45d4e141bda55180a923503378129d5d9d84f4f5f210d5cbc7226ec507cdce970d08c3f

  • SSDEEP

    3072:k92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTNrLA:k9NSMOEpQ1Q3ODAr+VN

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_0b9617b6b7a82e0297d3291e013fa9961438672bf04dddedf5dbc126cb07c239

    • Size

      184KB

    • MD5

      3a651937f9ee2fffa99857e650fd3fa8

    • SHA1

      fd47d2ceb718582220ae2479a546ccd648f17137

    • SHA256

      0b9617b6b7a82e0297d3291e013fa9961438672bf04dddedf5dbc126cb07c239

    • SHA512

      fbcd5833667d1aa459c1f823684725480659db5be476954882a680aae45d4e141bda55180a923503378129d5d9d84f4f5f210d5cbc7226ec507cdce970d08c3f

    • SSDEEP

      3072:k92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTNrLA:k9NSMOEpQ1Q3ODAr+VN

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks