General

  • Target

    JaffaCakes118_dc81e91f9c0e4576d58ca556605490cc0c7b5b2ffe031b405154bf7ab2604708

  • Size

    184KB

  • Sample

    241230-wex3sstres

  • MD5

    47e89fafc4b291adccf24900b57b1e5e

  • SHA1

    e92494ab8ab7dcae92cd5202a79a36a03b07549d

  • SHA256

    dc81e91f9c0e4576d58ca556605490cc0c7b5b2ffe031b405154bf7ab2604708

  • SHA512

    b95bebed22e9270086342e80360823452e9feae8ccad061cfa014e37ddddd3afe1fb32f34f121551495ba16c0388b9e4bf0cf88d128d70bf63c83ed72d141441

  • SSDEEP

    3072:C92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTTrLA:C9NSMOEpQ1Q3ODAr+VL

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_dc81e91f9c0e4576d58ca556605490cc0c7b5b2ffe031b405154bf7ab2604708

    • Size

      184KB

    • MD5

      47e89fafc4b291adccf24900b57b1e5e

    • SHA1

      e92494ab8ab7dcae92cd5202a79a36a03b07549d

    • SHA256

      dc81e91f9c0e4576d58ca556605490cc0c7b5b2ffe031b405154bf7ab2604708

    • SHA512

      b95bebed22e9270086342e80360823452e9feae8ccad061cfa014e37ddddd3afe1fb32f34f121551495ba16c0388b9e4bf0cf88d128d70bf63c83ed72d141441

    • SSDEEP

      3072:C92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTTrLA:C9NSMOEpQ1Q3ODAr+VL

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks