General

  • Target

    JaffaCakes118_3e4edf8ab7e9c57570614832a16c6729bac8bf585254b84a326663de5d3db399

  • Size

    184KB

  • Sample

    241230-fejmeaylhx

  • MD5

    4a2e9760d54b47a90dd3a79616dc72b0

  • SHA1

    528bac78b8ba18b4cea9744e511bf24b194d9735

  • SHA256

    3e4edf8ab7e9c57570614832a16c6729bac8bf585254b84a326663de5d3db399

  • SHA512

    7b7060009daed0b85cee603c701489a264c8dfe21f74b14f0c987013e1ebfbf3c99fd547edb550a762500882aaa7f8df4f60f91e732cb0782f36ced265d4176a

  • SSDEEP

    3072:092qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTNrLA:09NSMOEpQ1Q3ODAr+Vt

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_3e4edf8ab7e9c57570614832a16c6729bac8bf585254b84a326663de5d3db399

    • Size

      184KB

    • MD5

      4a2e9760d54b47a90dd3a79616dc72b0

    • SHA1

      528bac78b8ba18b4cea9744e511bf24b194d9735

    • SHA256

      3e4edf8ab7e9c57570614832a16c6729bac8bf585254b84a326663de5d3db399

    • SHA512

      7b7060009daed0b85cee603c701489a264c8dfe21f74b14f0c987013e1ebfbf3c99fd547edb550a762500882aaa7f8df4f60f91e732cb0782f36ced265d4176a

    • SSDEEP

      3072:092qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTNrLA:09NSMOEpQ1Q3ODAr+Vt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks