General

  • Target

    JaffaCakes118_5436c524e101dfabb38a328428ea243b3d5e42053c8e696db838ff76d89ca525

  • Size

    184KB

  • Sample

    241230-wypkrssndm

  • MD5

    b742a2fe3b15789c08739d5516646fbc

  • SHA1

    b6bdd424174d52b1eef574a31ab1a5a7151563d1

  • SHA256

    5436c524e101dfabb38a328428ea243b3d5e42053c8e696db838ff76d89ca525

  • SHA512

    4be68d78f5305be413f74b8ccee8a006fe3f11401004414f385e1c15f1833042dfe383ec77e90f9c0ae13f41ce2eb7a80f753063ccac93d91e45baa4aa17ebf8

  • SSDEEP

    3072:tJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jxa//2uFrSc:WfYOX+wTScR/Xzku9LVwCuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_5436c524e101dfabb38a328428ea243b3d5e42053c8e696db838ff76d89ca525

    • Size

      184KB

    • MD5

      b742a2fe3b15789c08739d5516646fbc

    • SHA1

      b6bdd424174d52b1eef574a31ab1a5a7151563d1

    • SHA256

      5436c524e101dfabb38a328428ea243b3d5e42053c8e696db838ff76d89ca525

    • SHA512

      4be68d78f5305be413f74b8ccee8a006fe3f11401004414f385e1c15f1833042dfe383ec77e90f9c0ae13f41ce2eb7a80f753063ccac93d91e45baa4aa17ebf8

    • SSDEEP

      3072:tJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jxa//2uFrSc:WfYOX+wTScR/Xzku9LVwCuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks