General

  • Target

    JaffaCakes118_b3c3ae90212c0ddb729694b4d6b6f7e51dee9b0a1b4c6cdd2d5c47f3a40aa20e

  • Size

    184KB

  • Sample

    241230-1yxcts1kdn

  • MD5

    804cbc28202952a6125a693d8752604f

  • SHA1

    13b0bd7c15eabf4165772fc839ad5853d578ba67

  • SHA256

    b3c3ae90212c0ddb729694b4d6b6f7e51dee9b0a1b4c6cdd2d5c47f3a40aa20e

  • SHA512

    2afc987cf6f257462c6e457e0f70c959a9f4b8ab5e6a1f286ba352395ea9476fc5ce132523407ca98f3370e71ef2bf33e099b9d6ab12b5a04416a1b64694d795

  • SSDEEP

    3072:i92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTsrLA:i9NSMOEpQ1Q3ODAr+V4

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_b3c3ae90212c0ddb729694b4d6b6f7e51dee9b0a1b4c6cdd2d5c47f3a40aa20e

    • Size

      184KB

    • MD5

      804cbc28202952a6125a693d8752604f

    • SHA1

      13b0bd7c15eabf4165772fc839ad5853d578ba67

    • SHA256

      b3c3ae90212c0ddb729694b4d6b6f7e51dee9b0a1b4c6cdd2d5c47f3a40aa20e

    • SHA512

      2afc987cf6f257462c6e457e0f70c959a9f4b8ab5e6a1f286ba352395ea9476fc5ce132523407ca98f3370e71ef2bf33e099b9d6ab12b5a04416a1b64694d795

    • SSDEEP

      3072:i92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTsrLA:i9NSMOEpQ1Q3ODAr+V4

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks