General

  • Target

    JaffaCakes118_b280bbab23d85f7f703533ae819922d7cb69e7241a8f893f3750b154e2049c43

  • Size

    184KB

  • Sample

    241230-v59c3stnby

  • MD5

    dcdee131234dcb7cc8a0b0c8954e08a9

  • SHA1

    bd596b1f066518560a6ff775f3e226834d15fb96

  • SHA256

    b280bbab23d85f7f703533ae819922d7cb69e7241a8f893f3750b154e2049c43

  • SHA512

    1a7044576025a14fe143e66df0e8f8a546a6631951779182fa7732504cd9ee356245fe6bf392be52a50380f57920b5dbea661be27ca1652707158df5c0cf5ba6

  • SSDEEP

    3072:fJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JJa//2uFrSc:MfYOX+wTScR/Xzku9LVwCuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_b280bbab23d85f7f703533ae819922d7cb69e7241a8f893f3750b154e2049c43

    • Size

      184KB

    • MD5

      dcdee131234dcb7cc8a0b0c8954e08a9

    • SHA1

      bd596b1f066518560a6ff775f3e226834d15fb96

    • SHA256

      b280bbab23d85f7f703533ae819922d7cb69e7241a8f893f3750b154e2049c43

    • SHA512

      1a7044576025a14fe143e66df0e8f8a546a6631951779182fa7732504cd9ee356245fe6bf392be52a50380f57920b5dbea661be27ca1652707158df5c0cf5ba6

    • SSDEEP

      3072:fJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JJa//2uFrSc:MfYOX+wTScR/Xzku9LVwCuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks