General

  • Target

    JaffaCakes118_386970d6f29d15ec70db122118689a88923aaa2e08568c054627466b28e07ac3

  • Size

    184KB

  • Sample

    241230-1ztcka1khp

  • MD5

    eb971ec66c9150664d93eda4bf64c262

  • SHA1

    996d4553eca26b1704c594a56185cfbd1f6df53c

  • SHA256

    386970d6f29d15ec70db122118689a88923aaa2e08568c054627466b28e07ac3

  • SHA512

    c4716893cb474c1a7ea650235518430f6317b64439484c78b28f8392cb73b1305c84293dc81679f424a214f14e62f490ec5e2ea3e0156b9e3bd97fb8df6b12d6

  • SSDEEP

    3072:dJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JOa//2uFrSc:mfYOX+wTScR/Xzku9LVwNuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_386970d6f29d15ec70db122118689a88923aaa2e08568c054627466b28e07ac3

    • Size

      184KB

    • MD5

      eb971ec66c9150664d93eda4bf64c262

    • SHA1

      996d4553eca26b1704c594a56185cfbd1f6df53c

    • SHA256

      386970d6f29d15ec70db122118689a88923aaa2e08568c054627466b28e07ac3

    • SHA512

      c4716893cb474c1a7ea650235518430f6317b64439484c78b28f8392cb73b1305c84293dc81679f424a214f14e62f490ec5e2ea3e0156b9e3bd97fb8df6b12d6

    • SSDEEP

      3072:dJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JOa//2uFrSc:mfYOX+wTScR/Xzku9LVwNuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks