General

  • Target

    JaffaCakes118_b164bafbc94be4dbc43303ae50ab5c33cf0fad3f6ba0e821a359bd88f42427eb

  • Size

    184KB

  • Sample

    241230-2q56fasmem

  • MD5

    548aacc6d1648dcf21496526b68236d2

  • SHA1

    e65391c3f2b3286e38ab93cfa6f5b6473dd65a9e

  • SHA256

    b164bafbc94be4dbc43303ae50ab5c33cf0fad3f6ba0e821a359bd88f42427eb

  • SHA512

    ae58aa95a54447a8ead82816a1e35973e538ec4df4aa07a2bd353b1abcc2e7380335479a47eece5a8f0e5d8d39d7edc78791d8836f9ab13e675c669159d26596

  • SSDEEP

    3072:T92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTTrLA:T9NSMOEpQ1Q3ODAr+Vz

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_b164bafbc94be4dbc43303ae50ab5c33cf0fad3f6ba0e821a359bd88f42427eb

    • Size

      184KB

    • MD5

      548aacc6d1648dcf21496526b68236d2

    • SHA1

      e65391c3f2b3286e38ab93cfa6f5b6473dd65a9e

    • SHA256

      b164bafbc94be4dbc43303ae50ab5c33cf0fad3f6ba0e821a359bd88f42427eb

    • SHA512

      ae58aa95a54447a8ead82816a1e35973e538ec4df4aa07a2bd353b1abcc2e7380335479a47eece5a8f0e5d8d39d7edc78791d8836f9ab13e675c669159d26596

    • SSDEEP

      3072:T92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTTrLA:T9NSMOEpQ1Q3ODAr+Vz

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks