General

  • Target

    JaffaCakes118_a0288143bdf14351fd9be0a3a02f43bb33bb27529c0c12e67656b8abfa2c11f6

  • Size

    184KB

  • Sample

    241230-1fs8fssndy

  • MD5

    ceee353af1c7d1c9719603e5efad1209

  • SHA1

    6e3b2c28a5e775475afe5106295c22182b068609

  • SHA256

    a0288143bdf14351fd9be0a3a02f43bb33bb27529c0c12e67656b8abfa2c11f6

  • SHA512

    8545a560dd8ca39a739c578d2f2c05987fb1479f7723145164c953af48c9a23724f6a4a0de3a04e3655cc42606279e9b0cf38726eb4e29b59bafa0d43ffb9603

  • SSDEEP

    3072:V1JzSxp5PpRh7phfrv/6jC5KHWnzD7xC3/o1WXDCFUBUL1iMhmDEwmuFWwqF:V1JGz5pX7fz+C5kUzDA36bFUc1i7EwRW

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_a0288143bdf14351fd9be0a3a02f43bb33bb27529c0c12e67656b8abfa2c11f6

    • Size

      184KB

    • MD5

      ceee353af1c7d1c9719603e5efad1209

    • SHA1

      6e3b2c28a5e775475afe5106295c22182b068609

    • SHA256

      a0288143bdf14351fd9be0a3a02f43bb33bb27529c0c12e67656b8abfa2c11f6

    • SHA512

      8545a560dd8ca39a739c578d2f2c05987fb1479f7723145164c953af48c9a23724f6a4a0de3a04e3655cc42606279e9b0cf38726eb4e29b59bafa0d43ffb9603

    • SSDEEP

      3072:V1JzSxp5PpRh7phfrv/6jC5KHWnzD7xC3/o1WXDCFUBUL1iMhmDEwmuFWwqF:V1JGz5pX7fz+C5kUzDA36bFUc1i7EwRW

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks