General

  • Target

    JaffaCakes118_7604aac7ef0e36bed83b9d866ad5284fc0aed4c3276608c3a198838993761fdf

  • Size

    184KB

  • Sample

    241230-27fl4swlft

  • MD5

    4d4abb0c8c4ea45c623ffd8b9d375890

  • SHA1

    bb9f6c10043e310388766d96aed52adc86ca1ba4

  • SHA256

    7604aac7ef0e36bed83b9d866ad5284fc0aed4c3276608c3a198838993761fdf

  • SHA512

    9bf0457c02e6cdf6b6bbdf85323cd63e6ae0f5914fa3329614f54bd6f829c4d8c0a3960744d84b25355fad3a5a3c1a009b3b9ede34da1e703975539d30b3ffdd

  • SSDEEP

    3072:cJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JSa//2uFrSc:hfYOX+wTScR/Xzku9LVwxuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_7604aac7ef0e36bed83b9d866ad5284fc0aed4c3276608c3a198838993761fdf

    • Size

      184KB

    • MD5

      4d4abb0c8c4ea45c623ffd8b9d375890

    • SHA1

      bb9f6c10043e310388766d96aed52adc86ca1ba4

    • SHA256

      7604aac7ef0e36bed83b9d866ad5284fc0aed4c3276608c3a198838993761fdf

    • SHA512

      9bf0457c02e6cdf6b6bbdf85323cd63e6ae0f5914fa3329614f54bd6f829c4d8c0a3960744d84b25355fad3a5a3c1a009b3b9ede34da1e703975539d30b3ffdd

    • SSDEEP

      3072:cJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JSa//2uFrSc:hfYOX+wTScR/Xzku9LVwxuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks