General

  • Target

    JaffaCakes118_4327a66a523c8db60a211c7d3cc09a7d0d6496782bcde5d6c278eee6ac17ce47

  • Size

    184KB

  • Sample

    241230-v6p1ts1ncq

  • MD5

    48cb4e53643ffbaf2767f34c0a1323c8

  • SHA1

    066082becdaf7a61b9a25109aca16220a121e3aa

  • SHA256

    4327a66a523c8db60a211c7d3cc09a7d0d6496782bcde5d6c278eee6ac17ce47

  • SHA512

    5a563f3e8b25a9cd55fbf240f9fdc3d8d11455d4fc27540c7934671d6f395595e67b1c095b6fb79fe24657b35ca489825cb0fc55175da1a8b7fbd9e6e3cacd68

  • SSDEEP

    3072:X92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTFrLA:X9NSMOEpQ1Q3ODAr+V9

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_4327a66a523c8db60a211c7d3cc09a7d0d6496782bcde5d6c278eee6ac17ce47

    • Size

      184KB

    • MD5

      48cb4e53643ffbaf2767f34c0a1323c8

    • SHA1

      066082becdaf7a61b9a25109aca16220a121e3aa

    • SHA256

      4327a66a523c8db60a211c7d3cc09a7d0d6496782bcde5d6c278eee6ac17ce47

    • SHA512

      5a563f3e8b25a9cd55fbf240f9fdc3d8d11455d4fc27540c7934671d6f395595e67b1c095b6fb79fe24657b35ca489825cb0fc55175da1a8b7fbd9e6e3cacd68

    • SSDEEP

      3072:X92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTFrLA:X9NSMOEpQ1Q3ODAr+V9

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks