General

  • Target

    JaffaCakes118_74cc8572f7f5659e362dd4a7b1307e15223253daf06db52ca4e9581cedc4f4e6

  • Size

    184KB

  • Sample

    241230-gbp6fszmct

  • MD5

    7bdb981327ef53f45ec901b23936f441

  • SHA1

    b8c2b986d45ef3dc8b1a0e11c73b5b18a7bed102

  • SHA256

    74cc8572f7f5659e362dd4a7b1307e15223253daf06db52ca4e9581cedc4f4e6

  • SHA512

    a1c7e4172dbb51add837ea917d14535cf664848c40b406d9ae751d8f1ec5fef27cbaa88b4a0e89eddac7af8aa8d7b2508e57dcb1d310251d4f74ca226d143908

  • SSDEEP

    3072:f92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTrrLA:f9NSMOEpQ1Q3ODAr+V7

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_74cc8572f7f5659e362dd4a7b1307e15223253daf06db52ca4e9581cedc4f4e6

    • Size

      184KB

    • MD5

      7bdb981327ef53f45ec901b23936f441

    • SHA1

      b8c2b986d45ef3dc8b1a0e11c73b5b18a7bed102

    • SHA256

      74cc8572f7f5659e362dd4a7b1307e15223253daf06db52ca4e9581cedc4f4e6

    • SHA512

      a1c7e4172dbb51add837ea917d14535cf664848c40b406d9ae751d8f1ec5fef27cbaa88b4a0e89eddac7af8aa8d7b2508e57dcb1d310251d4f74ca226d143908

    • SSDEEP

      3072:f92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTrrLA:f9NSMOEpQ1Q3ODAr+V7

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks