General

  • Target

    JaffaCakes118_ecdcd7626b12eb8bd66679b008123742abc370eecaf9a26bfc8bec435b69764a

  • Size

    184KB

  • Sample

    241230-gvwscazqhm

  • MD5

    fdb2db22b5c32a2e4bd014a4d3c6eedb

  • SHA1

    b4959b14789a5da03ac382fcb4b3c6bd382b33fc

  • SHA256

    ecdcd7626b12eb8bd66679b008123742abc370eecaf9a26bfc8bec435b69764a

  • SHA512

    48ee7cd0d6a359190f51cb770271b5131899c68aace90b25b517a01ac8c97a9f6f94491777f4fe884c326b9e97d7a86b0569822a8913e6e13a7599a7060b2503

  • SSDEEP

    3072:t92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTVrLA:t9NSMOEpQ1Q3ODAr+VF

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_ecdcd7626b12eb8bd66679b008123742abc370eecaf9a26bfc8bec435b69764a

    • Size

      184KB

    • MD5

      fdb2db22b5c32a2e4bd014a4d3c6eedb

    • SHA1

      b4959b14789a5da03ac382fcb4b3c6bd382b33fc

    • SHA256

      ecdcd7626b12eb8bd66679b008123742abc370eecaf9a26bfc8bec435b69764a

    • SHA512

      48ee7cd0d6a359190f51cb770271b5131899c68aace90b25b517a01ac8c97a9f6f94491777f4fe884c326b9e97d7a86b0569822a8913e6e13a7599a7060b2503

    • SSDEEP

      3072:t92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTVrLA:t9NSMOEpQ1Q3ODAr+VF

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks