General

  • Target

    JaffaCakes118_64ffc26158ef08553db171dba9f87e4ed2fb9d2468068d38932cb62e0a03b040

  • Size

    184KB

  • Sample

    241230-d4jbtswrgs

  • MD5

    c38e924002fe750defa9bd526bf4f6fc

  • SHA1

    7aef4ccf2f4eecee16274c12f17de1eb2aa1a41a

  • SHA256

    64ffc26158ef08553db171dba9f87e4ed2fb9d2468068d38932cb62e0a03b040

  • SHA512

    6227f3a19607922650555bc53ddddfcc8418e219c2743b1b3a1996c035abbef8261d406101b42e5b26c10638d390e4ac347e0cb66d8b27a97d6bce99d4f0847b

  • SSDEEP

    3072:u92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTIrLA:u9NSMOEpQ1Q3ODAr+V0

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_64ffc26158ef08553db171dba9f87e4ed2fb9d2468068d38932cb62e0a03b040

    • Size

      184KB

    • MD5

      c38e924002fe750defa9bd526bf4f6fc

    • SHA1

      7aef4ccf2f4eecee16274c12f17de1eb2aa1a41a

    • SHA256

      64ffc26158ef08553db171dba9f87e4ed2fb9d2468068d38932cb62e0a03b040

    • SHA512

      6227f3a19607922650555bc53ddddfcc8418e219c2743b1b3a1996c035abbef8261d406101b42e5b26c10638d390e4ac347e0cb66d8b27a97d6bce99d4f0847b

    • SSDEEP

      3072:u92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTIrLA:u9NSMOEpQ1Q3ODAr+V0

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks