General

  • Target

    JaffaCakes118_9b7eebd3c505af767944b16f02be013c89ffa5fc6c5f40ecdd92453570be91e6

  • Size

    184KB

  • Sample

    241230-f5kbmayrhv

  • MD5

    d680669bbf73dc50a1adf2a00523ead2

  • SHA1

    faa5b901d46e1a7239a6e62fd581d5ec2804c233

  • SHA256

    9b7eebd3c505af767944b16f02be013c89ffa5fc6c5f40ecdd92453570be91e6

  • SHA512

    cad995f598dd40f513ec86f3eae6b6b0f9c9c8d33657ff14ed0a5047a8371e21ae2818f5a39eeef7228fafd108bcfcdaf403eb92a02dc6801071f411bedb41e7

  • SSDEEP

    3072:TJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Joa//2uFrSc:YfYOX+wTScR/Xzku9LVwzuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_9b7eebd3c505af767944b16f02be013c89ffa5fc6c5f40ecdd92453570be91e6

    • Size

      184KB

    • MD5

      d680669bbf73dc50a1adf2a00523ead2

    • SHA1

      faa5b901d46e1a7239a6e62fd581d5ec2804c233

    • SHA256

      9b7eebd3c505af767944b16f02be013c89ffa5fc6c5f40ecdd92453570be91e6

    • SHA512

      cad995f598dd40f513ec86f3eae6b6b0f9c9c8d33657ff14ed0a5047a8371e21ae2818f5a39eeef7228fafd108bcfcdaf403eb92a02dc6801071f411bedb41e7

    • SSDEEP

      3072:TJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Joa//2uFrSc:YfYOX+wTScR/Xzku9LVwzuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks