General

  • Target

    JaffaCakes118_0d0153fbd56e15cc580e372918f0bfc2dcf66817e61b64b4c76588e45e567a9e

  • Size

    184KB

  • Sample

    241230-3x2l9sxpdx

  • MD5

    0c3088bd970ca6a9b362d118acf28c45

  • SHA1

    8d0756a44103759473a49143bf6c4c77030bf0f2

  • SHA256

    0d0153fbd56e15cc580e372918f0bfc2dcf66817e61b64b4c76588e45e567a9e

  • SHA512

    1b2002aa7d4351fe9c49c42b0f25f0aeeece3784c822d62979fabc52609f149ce8737fa9272adf73ad669acfa247249b79fbbc738ea8ec70fbbfef9340a3a1e3

  • SSDEEP

    3072:/92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTwrLA:/9NSMOEpQ1Q3ODAr+Vs

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_0d0153fbd56e15cc580e372918f0bfc2dcf66817e61b64b4c76588e45e567a9e

    • Size

      184KB

    • MD5

      0c3088bd970ca6a9b362d118acf28c45

    • SHA1

      8d0756a44103759473a49143bf6c4c77030bf0f2

    • SHA256

      0d0153fbd56e15cc580e372918f0bfc2dcf66817e61b64b4c76588e45e567a9e

    • SHA512

      1b2002aa7d4351fe9c49c42b0f25f0aeeece3784c822d62979fabc52609f149ce8737fa9272adf73ad669acfa247249b79fbbc738ea8ec70fbbfef9340a3a1e3

    • SSDEEP

      3072:/92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTwrLA:/9NSMOEpQ1Q3ODAr+Vs

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks