General

  • Target

    JaffaCakes118_0c2a177f7c3e06407b1175c54b05884a60627ff44570d6a8c4b2dbfbee205be3

  • Size

    184KB

  • Sample

    241230-vr9fxs1jck

  • MD5

    62f43ec7d232381b2cd65762793fc2f7

  • SHA1

    d7d4b2e7e4c061667881e6f757bf8ba417ecff40

  • SHA256

    0c2a177f7c3e06407b1175c54b05884a60627ff44570d6a8c4b2dbfbee205be3

  • SHA512

    be23e1636a762268529f8aaa9a23e30ad41361bf548927d62f8093361a618ce82c54b80376a07808bdc921e95177719f38fe9958c961e989e6cabc8d430bd515

  • SSDEEP

    3072:r92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTurLA:r9NSMOEpQ1Q3ODAr+V6

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_0c2a177f7c3e06407b1175c54b05884a60627ff44570d6a8c4b2dbfbee205be3

    • Size

      184KB

    • MD5

      62f43ec7d232381b2cd65762793fc2f7

    • SHA1

      d7d4b2e7e4c061667881e6f757bf8ba417ecff40

    • SHA256

      0c2a177f7c3e06407b1175c54b05884a60627ff44570d6a8c4b2dbfbee205be3

    • SHA512

      be23e1636a762268529f8aaa9a23e30ad41361bf548927d62f8093361a618ce82c54b80376a07808bdc921e95177719f38fe9958c961e989e6cabc8d430bd515

    • SSDEEP

      3072:r92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTurLA:r9NSMOEpQ1Q3ODAr+V6

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks