General

  • Target

    JaffaCakes118_3baf27c5ca2e00f9dcaf8a5c7258589bb6f3ca7cb666fe2e32a5dbade4ac1e2f

  • Size

    184KB

  • Sample

    241230-wb591a1qcn

  • MD5

    c63d3d0122baf5775d38a0a1da3d1f44

  • SHA1

    58e6c131e706ee5d49eaef63c683c1d5b5dc9852

  • SHA256

    3baf27c5ca2e00f9dcaf8a5c7258589bb6f3ca7cb666fe2e32a5dbade4ac1e2f

  • SHA512

    6b9d0d8e5aed0f9cb26567a07664714605f75c572c5f5fb9b4ca724d7d29b65acfec4a0c63c4180f7434362b9822cd9a2252d70a423be0e4d6bf09421f5a4611

  • SSDEEP

    3072:MJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JIa//2uFrSc:xfYOX+wTScR/Xzku9LVw3uG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_3baf27c5ca2e00f9dcaf8a5c7258589bb6f3ca7cb666fe2e32a5dbade4ac1e2f

    • Size

      184KB

    • MD5

      c63d3d0122baf5775d38a0a1da3d1f44

    • SHA1

      58e6c131e706ee5d49eaef63c683c1d5b5dc9852

    • SHA256

      3baf27c5ca2e00f9dcaf8a5c7258589bb6f3ca7cb666fe2e32a5dbade4ac1e2f

    • SHA512

      6b9d0d8e5aed0f9cb26567a07664714605f75c572c5f5fb9b4ca724d7d29b65acfec4a0c63c4180f7434362b9822cd9a2252d70a423be0e4d6bf09421f5a4611

    • SSDEEP

      3072:MJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JIa//2uFrSc:xfYOX+wTScR/Xzku9LVw3uG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks