General

  • Target

    JaffaCakes118_beab2ee67c47d784b2cdc9691f800d76065b86d7dc9b781b8f1d7b51d242fe7a

  • Size

    184KB

  • Sample

    241230-e1yssayjak

  • MD5

    12f0541b1c770aaf33ccb7fe536d1e35

  • SHA1

    d35f1270ee3594f5112a6cf72f820faa07588e6e

  • SHA256

    beab2ee67c47d784b2cdc9691f800d76065b86d7dc9b781b8f1d7b51d242fe7a

  • SHA512

    51f78bf998bb9789f00182af40c538ac65393f17fa4f96206c2f7249aac2e9898154797723c498a8068d43f7d790e768b1cac12e2a73164038f7dff0d92b42a7

  • SSDEEP

    3072:F92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTFrLA:F9NSMOEpQ1Q3ODAr+Vl

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_beab2ee67c47d784b2cdc9691f800d76065b86d7dc9b781b8f1d7b51d242fe7a

    • Size

      184KB

    • MD5

      12f0541b1c770aaf33ccb7fe536d1e35

    • SHA1

      d35f1270ee3594f5112a6cf72f820faa07588e6e

    • SHA256

      beab2ee67c47d784b2cdc9691f800d76065b86d7dc9b781b8f1d7b51d242fe7a

    • SHA512

      51f78bf998bb9789f00182af40c538ac65393f17fa4f96206c2f7249aac2e9898154797723c498a8068d43f7d790e768b1cac12e2a73164038f7dff0d92b42a7

    • SSDEEP

      3072:F92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTFrLA:F9NSMOEpQ1Q3ODAr+Vl

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks