General

  • Target

    JaffaCakes118_444e895237fff64df67586565eca822ff8f28f92793ae3fc3f61b46e185915a5

  • Size

    184KB

  • Sample

    241230-gllk1szpe1

  • MD5

    7602d3a81b4110d3e73f6275e4b24871

  • SHA1

    1c33e2ac001ba20b5e46eacf97947ac4c203c254

  • SHA256

    444e895237fff64df67586565eca822ff8f28f92793ae3fc3f61b46e185915a5

  • SHA512

    23f87c0f99ec5432d70332bb03fc8742ab462071ebb0e6c7fff4c9ca326ad1af915f22a909af9c412060d2bd0cbb42abcf6eb5dc98ce6a91625404aac3e5a4a2

  • SSDEEP

    3072:/92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTSrLA:/9NSMOEpQ1Q3ODAr+Vm

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_444e895237fff64df67586565eca822ff8f28f92793ae3fc3f61b46e185915a5

    • Size

      184KB

    • MD5

      7602d3a81b4110d3e73f6275e4b24871

    • SHA1

      1c33e2ac001ba20b5e46eacf97947ac4c203c254

    • SHA256

      444e895237fff64df67586565eca822ff8f28f92793ae3fc3f61b46e185915a5

    • SHA512

      23f87c0f99ec5432d70332bb03fc8742ab462071ebb0e6c7fff4c9ca326ad1af915f22a909af9c412060d2bd0cbb42abcf6eb5dc98ce6a91625404aac3e5a4a2

    • SSDEEP

      3072:/92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTSrLA:/9NSMOEpQ1Q3ODAr+Vm

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks