General

  • Target

    JaffaCakes118_987fc76006da377e4ff2b99b3e0ff110faa2f8334afbd091ad88b997c035c303

  • Size

    184KB

  • Sample

    241230-v6ly6stndt

  • MD5

    497d1991cc102c7c260b6ae72797e53e

  • SHA1

    da9ae76ef1c36408c18973761aca41a9f7773a47

  • SHA256

    987fc76006da377e4ff2b99b3e0ff110faa2f8334afbd091ad88b997c035c303

  • SHA512

    0922826e019401268d7fda78bc4e3e322ca05dff6d1ac44179541912f4fcc12ab15daec52d6593795529bd170123eb1522d48b2a5d88ab922718462bb6c7b02e

  • SSDEEP

    3072:e92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTTrLA:e9NSMOEpQ1Q3ODAr+Vj

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_987fc76006da377e4ff2b99b3e0ff110faa2f8334afbd091ad88b997c035c303

    • Size

      184KB

    • MD5

      497d1991cc102c7c260b6ae72797e53e

    • SHA1

      da9ae76ef1c36408c18973761aca41a9f7773a47

    • SHA256

      987fc76006da377e4ff2b99b3e0ff110faa2f8334afbd091ad88b997c035c303

    • SHA512

      0922826e019401268d7fda78bc4e3e322ca05dff6d1ac44179541912f4fcc12ab15daec52d6593795529bd170123eb1522d48b2a5d88ab922718462bb6c7b02e

    • SSDEEP

      3072:e92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTTrLA:e9NSMOEpQ1Q3ODAr+Vj

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks