General

  • Target

    JaffaCakes118_ccc610d5481a0ca1bf0f8224392d64141434471b16c586a9d6205055165d0700

  • Size

    184KB

  • Sample

    241230-1cjvlszkdp

  • MD5

    48eec226764607181651d59484e416b6

  • SHA1

    b91e38f7a22e3dde79072e01f21239cfd5d3e490

  • SHA256

    ccc610d5481a0ca1bf0f8224392d64141434471b16c586a9d6205055165d0700

  • SHA512

    47a18597f9c9b5bf0f58fc24f1a49ea7837da9fe63ef8d53ee0975c749adbcf29f4855d17b570e45e4b0c745e85dc845bc4293f89c8de9b540fec1807bdfe924

  • SSDEEP

    3072:J92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMT1rLA:J9NSMOEpQ1Q3ODAr+Vd

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_ccc610d5481a0ca1bf0f8224392d64141434471b16c586a9d6205055165d0700

    • Size

      184KB

    • MD5

      48eec226764607181651d59484e416b6

    • SHA1

      b91e38f7a22e3dde79072e01f21239cfd5d3e490

    • SHA256

      ccc610d5481a0ca1bf0f8224392d64141434471b16c586a9d6205055165d0700

    • SHA512

      47a18597f9c9b5bf0f58fc24f1a49ea7837da9fe63ef8d53ee0975c749adbcf29f4855d17b570e45e4b0c745e85dc845bc4293f89c8de9b540fec1807bdfe924

    • SSDEEP

      3072:J92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMT1rLA:J9NSMOEpQ1Q3ODAr+Vd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks