General

  • Target

    JaffaCakes118_2789ac08275f4b09f0bdd69788ebf3c4919b9b79c5e18f98f099662977b6f58c

  • Size

    184KB

  • Sample

    241230-3t1wkavlam

  • MD5

    c4ac6178504ae8d6a89fd21191077afb

  • SHA1

    d7eda18e9d59e423b0f5a400e304ac0d15f27cd3

  • SHA256

    2789ac08275f4b09f0bdd69788ebf3c4919b9b79c5e18f98f099662977b6f58c

  • SHA512

    68d394ee0b5762eacbc9c4417e73acaad116dde8d37dc47e75622dac8430456c872489ea8c43172e2e6a9db902648aa4653d22e98f7fd9ddeb55ef7cc1ce5514

  • SSDEEP

    3072:AJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JSa//2uFrSc:9fYOX+wTScR/Xzku9LVw5uG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_2789ac08275f4b09f0bdd69788ebf3c4919b9b79c5e18f98f099662977b6f58c

    • Size

      184KB

    • MD5

      c4ac6178504ae8d6a89fd21191077afb

    • SHA1

      d7eda18e9d59e423b0f5a400e304ac0d15f27cd3

    • SHA256

      2789ac08275f4b09f0bdd69788ebf3c4919b9b79c5e18f98f099662977b6f58c

    • SHA512

      68d394ee0b5762eacbc9c4417e73acaad116dde8d37dc47e75622dac8430456c872489ea8c43172e2e6a9db902648aa4653d22e98f7fd9ddeb55ef7cc1ce5514

    • SSDEEP

      3072:AJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JSa//2uFrSc:9fYOX+wTScR/Xzku9LVw5uG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks