General

  • Target

    JaffaCakes118_50f5dd32825dd9fe298f0425f695282c4481ebf71b04154417be3b84114b7c73

  • Size

    184KB

  • Sample

    241230-1g9a3azmck

  • MD5

    d613a4d0f6c775796e1ca218d502f96a

  • SHA1

    a4277d709c86f6d105aaed35cebf56340c939d12

  • SHA256

    50f5dd32825dd9fe298f0425f695282c4481ebf71b04154417be3b84114b7c73

  • SHA512

    9c8898b859face88f7b5743490d31e76f136a28bd287dd09b65a60eec9a1f6388b1123f46f49b67052315884a5a9ffe05cc5daeca946ec8482e814dc59a0c131

  • SSDEEP

    3072:d92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTjrLA:d9NSMOEpQ1Q3ODAr+VL

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_50f5dd32825dd9fe298f0425f695282c4481ebf71b04154417be3b84114b7c73

    • Size

      184KB

    • MD5

      d613a4d0f6c775796e1ca218d502f96a

    • SHA1

      a4277d709c86f6d105aaed35cebf56340c939d12

    • SHA256

      50f5dd32825dd9fe298f0425f695282c4481ebf71b04154417be3b84114b7c73

    • SHA512

      9c8898b859face88f7b5743490d31e76f136a28bd287dd09b65a60eec9a1f6388b1123f46f49b67052315884a5a9ffe05cc5daeca946ec8482e814dc59a0c131

    • SSDEEP

      3072:d92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTjrLA:d9NSMOEpQ1Q3ODAr+VL

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks