General

  • Target

    JaffaCakes118_7e72ffed4a0467c973ebd3bb920db367fb6cb669c98ad1ae92559159dab802e2

  • Size

    184KB

  • Sample

    241230-feecpaylht

  • MD5

    a424d5f5306661c12c28ea1564c276a1

  • SHA1

    e542cebc1263bf8a60af19869e353f21a16e577b

  • SHA256

    7e72ffed4a0467c973ebd3bb920db367fb6cb669c98ad1ae92559159dab802e2

  • SHA512

    fd047fbba1fe4f188625a0931ed47d04df771612104715bc9c78914366f90d115bd98667819b9c663c8f839900852bf8f186491c7079f592bf0300e55550c53a

  • SSDEEP

    3072:592qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTjrLA:59NSMOEpQ1Q3ODAr+Vr

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_7e72ffed4a0467c973ebd3bb920db367fb6cb669c98ad1ae92559159dab802e2

    • Size

      184KB

    • MD5

      a424d5f5306661c12c28ea1564c276a1

    • SHA1

      e542cebc1263bf8a60af19869e353f21a16e577b

    • SHA256

      7e72ffed4a0467c973ebd3bb920db367fb6cb669c98ad1ae92559159dab802e2

    • SHA512

      fd047fbba1fe4f188625a0931ed47d04df771612104715bc9c78914366f90d115bd98667819b9c663c8f839900852bf8f186491c7079f592bf0300e55550c53a

    • SSDEEP

      3072:592qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTjrLA:59NSMOEpQ1Q3ODAr+Vr

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks