General

  • Target

    JaffaCakes118_ddf14a3bcfcbfd931a62537a082384897e42a448d5529df4b4dacba308e3ed57

  • Size

    184KB

  • Sample

    241230-221ebswjhw

  • MD5

    fbb936d9784f18904eecdc42daceb32b

  • SHA1

    ac9bb91b5eb09b1beac775493c310f6fe0cf37d5

  • SHA256

    ddf14a3bcfcbfd931a62537a082384897e42a448d5529df4b4dacba308e3ed57

  • SHA512

    94b8260a84f9ced7d82b531de28c5d239081644d4c602025c2db55d84f2133fdd7144e1396f89c5eed5f39dfcc85e71c7c719ea03deb6c5ddd7889701f0650e0

  • SSDEEP

    3072:sJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jra//2uFrSc:RfYOX+wTScR/Xzku9LVwEuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_ddf14a3bcfcbfd931a62537a082384897e42a448d5529df4b4dacba308e3ed57

    • Size

      184KB

    • MD5

      fbb936d9784f18904eecdc42daceb32b

    • SHA1

      ac9bb91b5eb09b1beac775493c310f6fe0cf37d5

    • SHA256

      ddf14a3bcfcbfd931a62537a082384897e42a448d5529df4b4dacba308e3ed57

    • SHA512

      94b8260a84f9ced7d82b531de28c5d239081644d4c602025c2db55d84f2133fdd7144e1396f89c5eed5f39dfcc85e71c7c719ea03deb6c5ddd7889701f0650e0

    • SSDEEP

      3072:sJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jra//2uFrSc:RfYOX+wTScR/Xzku9LVwEuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks