General

  • Target

    JaffaCakes118_2216fe75b4cdd6b753408bf0eb66d39eecad542e1d61b87fd212191e269c7f92

  • Size

    184KB

  • Sample

    241230-1qtlzatjcz

  • MD5

    9d97bfabdc6d26955236d86bbac05af3

  • SHA1

    4346266ed0591ff71ff6a8472178d1040ee64d9a

  • SHA256

    2216fe75b4cdd6b753408bf0eb66d39eecad542e1d61b87fd212191e269c7f92

  • SHA512

    081125062c8707c20e5d8e7332ce57bbd2798f88c75d7eaec6f1071d862e857b09357bec9ccdd3aa91299c9301b519b16817d5fe891ab6e10f1c5beb96451738

  • SSDEEP

    3072:p92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMT7rLA:p9NSMOEpQ1Q3ODAr+Vj

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_2216fe75b4cdd6b753408bf0eb66d39eecad542e1d61b87fd212191e269c7f92

    • Size

      184KB

    • MD5

      9d97bfabdc6d26955236d86bbac05af3

    • SHA1

      4346266ed0591ff71ff6a8472178d1040ee64d9a

    • SHA256

      2216fe75b4cdd6b753408bf0eb66d39eecad542e1d61b87fd212191e269c7f92

    • SHA512

      081125062c8707c20e5d8e7332ce57bbd2798f88c75d7eaec6f1071d862e857b09357bec9ccdd3aa91299c9301b519b16817d5fe891ab6e10f1c5beb96451738

    • SSDEEP

      3072:p92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMT7rLA:p9NSMOEpQ1Q3ODAr+Vj

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks