General

  • Target

    JaffaCakes118_d9310124562490e3867ba3a57534dbf2f804b9484d48cfad8ee73065ef6696ac

  • Size

    184KB

  • Sample

    241230-gwns5azrds

  • MD5

    0bcb744be16a176bb5ed5b72bfb626a3

  • SHA1

    42e67907bba63e60e77da766979b835b65a547ff

  • SHA256

    d9310124562490e3867ba3a57534dbf2f804b9484d48cfad8ee73065ef6696ac

  • SHA512

    9fc707dd05f3439c28dff4b58b97978ed2c2b4318bcae5c146f9880a8a50f66f4718f9c5974783bb15abd4fd03bd9d8675e91baa719ee1949d977fd5fb9642bc

  • SSDEEP

    3072:H92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTfrLA:H9NSMOEpQ1Q3ODAr+VP

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_d9310124562490e3867ba3a57534dbf2f804b9484d48cfad8ee73065ef6696ac

    • Size

      184KB

    • MD5

      0bcb744be16a176bb5ed5b72bfb626a3

    • SHA1

      42e67907bba63e60e77da766979b835b65a547ff

    • SHA256

      d9310124562490e3867ba3a57534dbf2f804b9484d48cfad8ee73065ef6696ac

    • SHA512

      9fc707dd05f3439c28dff4b58b97978ed2c2b4318bcae5c146f9880a8a50f66f4718f9c5974783bb15abd4fd03bd9d8675e91baa719ee1949d977fd5fb9642bc

    • SSDEEP

      3072:H92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTfrLA:H9NSMOEpQ1Q3ODAr+VP

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks