General

  • Target

    JaffaCakes118_da37846005f4e69e9630a5f3bc9d9ecd71ab2c3845072045beb8a5bd5be423a6

  • Size

    184KB

  • Sample

    241230-gx3nnszrdm

  • MD5

    32fd1382968330ed29a89003ae173862

  • SHA1

    433827b0c41bc37cc98ac7b17862cd4169602af9

  • SHA256

    da37846005f4e69e9630a5f3bc9d9ecd71ab2c3845072045beb8a5bd5be423a6

  • SHA512

    eaa4f2563dfdf44ebf34faf85516ef702d972082d35eb9868b4b01806ab3e49f46997b2e6a2e0c6570f9b34463069ceabde08d0f0e432c0ba655f6fe042c43c0

  • SSDEEP

    3072:092qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMT7rLA:09NSMOEpQ1Q3ODAr+Vb

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_da37846005f4e69e9630a5f3bc9d9ecd71ab2c3845072045beb8a5bd5be423a6

    • Size

      184KB

    • MD5

      32fd1382968330ed29a89003ae173862

    • SHA1

      433827b0c41bc37cc98ac7b17862cd4169602af9

    • SHA256

      da37846005f4e69e9630a5f3bc9d9ecd71ab2c3845072045beb8a5bd5be423a6

    • SHA512

      eaa4f2563dfdf44ebf34faf85516ef702d972082d35eb9868b4b01806ab3e49f46997b2e6a2e0c6570f9b34463069ceabde08d0f0e432c0ba655f6fe042c43c0

    • SSDEEP

      3072:092qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMT7rLA:09NSMOEpQ1Q3ODAr+Vb

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks