General

  • Target

    JaffaCakes118_aa336fe86031bff9cba58bbffd98358ae5abe24545d8f9336e82ca6ad91cc838

  • Size

    184KB

  • Sample

    241230-3f6vnawqcy

  • MD5

    3dcb2a2d5b04f89a199ec36d0ec43ecc

  • SHA1

    d0306e0fca2aab34ad4e88528cdfca953f418426

  • SHA256

    aa336fe86031bff9cba58bbffd98358ae5abe24545d8f9336e82ca6ad91cc838

  • SHA512

    1cf478ca6e3da80a54abdaae919767da20a1be6e7dbe4c1e88cb38f4700ed14195f964e596fddf493785ce539debb4aade5ac96f4f9dd856a19cc82ef511d2bc

  • SSDEEP

    3072:392qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTGrLA:39NSMOEpQ1Q3ODAr+VC

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_aa336fe86031bff9cba58bbffd98358ae5abe24545d8f9336e82ca6ad91cc838

    • Size

      184KB

    • MD5

      3dcb2a2d5b04f89a199ec36d0ec43ecc

    • SHA1

      d0306e0fca2aab34ad4e88528cdfca953f418426

    • SHA256

      aa336fe86031bff9cba58bbffd98358ae5abe24545d8f9336e82ca6ad91cc838

    • SHA512

      1cf478ca6e3da80a54abdaae919767da20a1be6e7dbe4c1e88cb38f4700ed14195f964e596fddf493785ce539debb4aade5ac96f4f9dd856a19cc82ef511d2bc

    • SSDEEP

      3072:392qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTGrLA:39NSMOEpQ1Q3ODAr+VC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks