General

  • Target

    JaffaCakes118_a3150adf7e0a20b2667037bb97eab9f15269992b7d002aab7736e12c19e7cb4a

  • Size

    184KB

  • Sample

    241230-x3fn4axmdv

  • MD5

    6ee79f5aa414c523c2c3278f3661df80

  • SHA1

    369c30486f5819d04e29c5d4bdd3269077b998b6

  • SHA256

    a3150adf7e0a20b2667037bb97eab9f15269992b7d002aab7736e12c19e7cb4a

  • SHA512

    cba370783fd095d3b2209bc6100057f46255826403e7cec9e244ed39fa64bea18fb7af94d199cc7732cef36c941f01b9f79e5c4fb18a011f9670d15409fb598a

  • SSDEEP

    3072:0JQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JCa//2uFrSc:5fYOX+wTScR/Xzku9LVwtuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_a3150adf7e0a20b2667037bb97eab9f15269992b7d002aab7736e12c19e7cb4a

    • Size

      184KB

    • MD5

      6ee79f5aa414c523c2c3278f3661df80

    • SHA1

      369c30486f5819d04e29c5d4bdd3269077b998b6

    • SHA256

      a3150adf7e0a20b2667037bb97eab9f15269992b7d002aab7736e12c19e7cb4a

    • SHA512

      cba370783fd095d3b2209bc6100057f46255826403e7cec9e244ed39fa64bea18fb7af94d199cc7732cef36c941f01b9f79e5c4fb18a011f9670d15409fb598a

    • SSDEEP

      3072:0JQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JCa//2uFrSc:5fYOX+wTScR/Xzku9LVwtuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks