General

  • Target

    JaffaCakes118_c20a288550994710ac86bf586cbc4dcbb44d9cf8da1c2ce0d4d452d2d713fd22

  • Size

    184KB

  • Sample

    241230-2frv3a1rgm

  • MD5

    562c20d1e6f1551b3453910cadda8a52

  • SHA1

    3c2333d3955d045c24837fbf98da7be2e31de43e

  • SHA256

    c20a288550994710ac86bf586cbc4dcbb44d9cf8da1c2ce0d4d452d2d713fd22

  • SHA512

    74eae1a284e063ff9bffee0cad79aa67f7ed7b49509f3eb1c45793d2667ee70761e3d940a51c53d5a3600f50ee08ab420755c744b7b3258858d99957a824f074

  • SSDEEP

    3072:Y92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTYrLA:Y9NSMOEpQ1Q3ODAr+V8

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_c20a288550994710ac86bf586cbc4dcbb44d9cf8da1c2ce0d4d452d2d713fd22

    • Size

      184KB

    • MD5

      562c20d1e6f1551b3453910cadda8a52

    • SHA1

      3c2333d3955d045c24837fbf98da7be2e31de43e

    • SHA256

      c20a288550994710ac86bf586cbc4dcbb44d9cf8da1c2ce0d4d452d2d713fd22

    • SHA512

      74eae1a284e063ff9bffee0cad79aa67f7ed7b49509f3eb1c45793d2667ee70761e3d940a51c53d5a3600f50ee08ab420755c744b7b3258858d99957a824f074

    • SSDEEP

      3072:Y92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTYrLA:Y9NSMOEpQ1Q3ODAr+V8

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks