General

  • Target

    JaffaCakes118_5de7fb86ae02482e746df6c64fe3afa0ca6d6cf43f1f57af166415fcfb4fac4e

  • Size

    184KB

  • Sample

    241230-gbdgnazmbx

  • MD5

    b66eb1e4f396d7f486f09a66459d69ff

  • SHA1

    4a03544cbc92c442c719ed469cc6643ee3ef0b96

  • SHA256

    5de7fb86ae02482e746df6c64fe3afa0ca6d6cf43f1f57af166415fcfb4fac4e

  • SHA512

    7ed7072c62da31260578f1a3a9528fbb484e02c1c0be13a1f2a925b5110c31a0975490a8d93651432ac75ce7f14e82cec93d9a4030ae2951d9fd50eb2f167e8f

  • SSDEEP

    3072:dJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jza//2uFrSc:mfYOX+wTScR/Xzku9LVwcuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_5de7fb86ae02482e746df6c64fe3afa0ca6d6cf43f1f57af166415fcfb4fac4e

    • Size

      184KB

    • MD5

      b66eb1e4f396d7f486f09a66459d69ff

    • SHA1

      4a03544cbc92c442c719ed469cc6643ee3ef0b96

    • SHA256

      5de7fb86ae02482e746df6c64fe3afa0ca6d6cf43f1f57af166415fcfb4fac4e

    • SHA512

      7ed7072c62da31260578f1a3a9528fbb484e02c1c0be13a1f2a925b5110c31a0975490a8d93651432ac75ce7f14e82cec93d9a4030ae2951d9fd50eb2f167e8f

    • SSDEEP

      3072:dJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jza//2uFrSc:mfYOX+wTScR/Xzku9LVwcuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks