General

  • Target

    JaffaCakes118_280e871b1dc51f349ff2cb385b1be79a3d1f6532ed9e1f33fa6960021a347d71

  • Size

    184KB

  • Sample

    241230-1v2hdatkh1

  • MD5

    56202072073abb058b5d0695381f5b81

  • SHA1

    8826b3b3340765d4d2afe751be4ad69efff3f5f8

  • SHA256

    280e871b1dc51f349ff2cb385b1be79a3d1f6532ed9e1f33fa6960021a347d71

  • SHA512

    7958e1f97b3942dc17fef3b5e19a7a5fbcb59ad5fbe6e038da6b69a747c9784cf31f9395a06c1ca0dfeee5c115276785d835069c9caad400f05613c4492550bf

  • SSDEEP

    3072:SJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8J9a//2uFrSc:TfYOX+wTScR/Xzku9LVwGuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_280e871b1dc51f349ff2cb385b1be79a3d1f6532ed9e1f33fa6960021a347d71

    • Size

      184KB

    • MD5

      56202072073abb058b5d0695381f5b81

    • SHA1

      8826b3b3340765d4d2afe751be4ad69efff3f5f8

    • SHA256

      280e871b1dc51f349ff2cb385b1be79a3d1f6532ed9e1f33fa6960021a347d71

    • SHA512

      7958e1f97b3942dc17fef3b5e19a7a5fbcb59ad5fbe6e038da6b69a747c9784cf31f9395a06c1ca0dfeee5c115276785d835069c9caad400f05613c4492550bf

    • SSDEEP

      3072:SJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8J9a//2uFrSc:TfYOX+wTScR/Xzku9LVwGuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks