General

  • Target

    JaffaCakes118_4f8a2e843c799cf1221c247dcf4a637e27fa0497be8d5294dd3a0075ebee466a

  • Size

    184KB

  • Sample

    241230-1ga39ssngy

  • MD5

    329386b1476274a0c6583fdd69bb8db4

  • SHA1

    aba6e0faae2c94224afe4c1e372d556e3418c442

  • SHA256

    4f8a2e843c799cf1221c247dcf4a637e27fa0497be8d5294dd3a0075ebee466a

  • SHA512

    61f408c16ffb65f418177011b5344071f5cd768789ead0fbb5cbd13765111157f16d7f704c791d7815630814de11196cf6cb3addb04997f9f4f7ceb23fab4265

  • SSDEEP

    3072:fJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8J2a//2uFrSc:MfYOX+wTScR/Xzku9LVwNuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_4f8a2e843c799cf1221c247dcf4a637e27fa0497be8d5294dd3a0075ebee466a

    • Size

      184KB

    • MD5

      329386b1476274a0c6583fdd69bb8db4

    • SHA1

      aba6e0faae2c94224afe4c1e372d556e3418c442

    • SHA256

      4f8a2e843c799cf1221c247dcf4a637e27fa0497be8d5294dd3a0075ebee466a

    • SHA512

      61f408c16ffb65f418177011b5344071f5cd768789ead0fbb5cbd13765111157f16d7f704c791d7815630814de11196cf6cb3addb04997f9f4f7ceb23fab4265

    • SSDEEP

      3072:fJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8J2a//2uFrSc:MfYOX+wTScR/Xzku9LVwNuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks