General

  • Target

    JaffaCakes118_47de982ff045ba7d4e46e2cd9d6c22e1177d494e6f6247706aff74e64ba730f9

  • Size

    184KB

  • Sample

    241230-3m1l8atqgq

  • MD5

    4dc6ea4fc2d2f120712554fc1f660635

  • SHA1

    202f18ced2c29abdb3aa8466a516de65b68fb2a7

  • SHA256

    47de982ff045ba7d4e46e2cd9d6c22e1177d494e6f6247706aff74e64ba730f9

  • SHA512

    7bd71a45ba9615c4f62e3b2e69f91437f4a6aff18e8a040acb7166d7970430437728ef5c6508e3714e677286e11ea9877c653d4f1d1c6093f6b4904cd09ae7be

  • SSDEEP

    3072:4JQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jya//2uFrSc:VfYOX+wTScR/Xzku9LVwxuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_47de982ff045ba7d4e46e2cd9d6c22e1177d494e6f6247706aff74e64ba730f9

    • Size

      184KB

    • MD5

      4dc6ea4fc2d2f120712554fc1f660635

    • SHA1

      202f18ced2c29abdb3aa8466a516de65b68fb2a7

    • SHA256

      47de982ff045ba7d4e46e2cd9d6c22e1177d494e6f6247706aff74e64ba730f9

    • SHA512

      7bd71a45ba9615c4f62e3b2e69f91437f4a6aff18e8a040acb7166d7970430437728ef5c6508e3714e677286e11ea9877c653d4f1d1c6093f6b4904cd09ae7be

    • SSDEEP

      3072:4JQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jya//2uFrSc:VfYOX+wTScR/Xzku9LVwxuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks