General

  • Target

    JaffaCakes118_b28d9587e1708c1857c2839e8197ad3d892eaf3903e6358ca118484da58ef06c

  • Size

    184KB

  • Sample

    241230-vl4y9asqdx

  • MD5

    c68020e44d6c2871006e3eabd343404e

  • SHA1

    8301ed26ed0acf036b54c0f1751932615292cd0a

  • SHA256

    b28d9587e1708c1857c2839e8197ad3d892eaf3903e6358ca118484da58ef06c

  • SHA512

    529657d2478100ef7bda48cef461d1b3ed9dcaf5c337e4f5b8a28cc8dc861b1e8f25c1960775f35dafd376315fc61a8cea76f742a4e1dde15bf5c5302b0ee18f

  • SSDEEP

    3072:T92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTVrLA:T9NSMOEpQ1Q3ODAr+VV

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_b28d9587e1708c1857c2839e8197ad3d892eaf3903e6358ca118484da58ef06c

    • Size

      184KB

    • MD5

      c68020e44d6c2871006e3eabd343404e

    • SHA1

      8301ed26ed0acf036b54c0f1751932615292cd0a

    • SHA256

      b28d9587e1708c1857c2839e8197ad3d892eaf3903e6358ca118484da58ef06c

    • SHA512

      529657d2478100ef7bda48cef461d1b3ed9dcaf5c337e4f5b8a28cc8dc861b1e8f25c1960775f35dafd376315fc61a8cea76f742a4e1dde15bf5c5302b0ee18f

    • SSDEEP

      3072:T92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTVrLA:T9NSMOEpQ1Q3ODAr+VV

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks