General

  • Target

    JaffaCakes118_13b5c5ec53d2a60c59044970baeae80c46f6fb916fab51bfca87d96151987522

  • Size

    184KB

  • Sample

    241230-emfp2sxne1

  • MD5

    087cde6063361274c24a72f7be2a39e1

  • SHA1

    fb21a99d36c64bb378093053163180c10fde6cd4

  • SHA256

    13b5c5ec53d2a60c59044970baeae80c46f6fb916fab51bfca87d96151987522

  • SHA512

    066b7a209da40b193b7dd843f046d62fc7e5098d89c831f479eebb2835647582f3b09c753c78b06a200ef95f13e377ed684b055901e95df103e6a4dbd68c9796

  • SSDEEP

    3072:R92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTurLA:R9NSMOEpQ1Q3ODAr+Vi

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_13b5c5ec53d2a60c59044970baeae80c46f6fb916fab51bfca87d96151987522

    • Size

      184KB

    • MD5

      087cde6063361274c24a72f7be2a39e1

    • SHA1

      fb21a99d36c64bb378093053163180c10fde6cd4

    • SHA256

      13b5c5ec53d2a60c59044970baeae80c46f6fb916fab51bfca87d96151987522

    • SHA512

      066b7a209da40b193b7dd843f046d62fc7e5098d89c831f479eebb2835647582f3b09c753c78b06a200ef95f13e377ed684b055901e95df103e6a4dbd68c9796

    • SSDEEP

      3072:R92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTurLA:R9NSMOEpQ1Q3ODAr+Vi

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks