General

  • Target

    JaffaCakes118_d31bd109e89d45c1f848ed125f9ea561c5e8b825a7b777ba63b56da5b8754805

  • Size

    184KB

  • Sample

    241230-x69fksxnht

  • MD5

    ed5b0e8cd4ad40add66de4f8e6620699

  • SHA1

    cc732605bc51e3b6c601c3634af76746081988f3

  • SHA256

    d31bd109e89d45c1f848ed125f9ea561c5e8b825a7b777ba63b56da5b8754805

  • SHA512

    4e633f0a812db8227c66ff04a8ccc9c33048b6370bee2335f9a9fd6ea579559c1eec27e91fd16a1767dea2a815906183d4b93e017b28e0303006e6cd8ad9c697

  • SSDEEP

    3072:fJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JIa//2uFrSc:MfYOX+wTScR/Xzku9LVwfuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_d31bd109e89d45c1f848ed125f9ea561c5e8b825a7b777ba63b56da5b8754805

    • Size

      184KB

    • MD5

      ed5b0e8cd4ad40add66de4f8e6620699

    • SHA1

      cc732605bc51e3b6c601c3634af76746081988f3

    • SHA256

      d31bd109e89d45c1f848ed125f9ea561c5e8b825a7b777ba63b56da5b8754805

    • SHA512

      4e633f0a812db8227c66ff04a8ccc9c33048b6370bee2335f9a9fd6ea579559c1eec27e91fd16a1767dea2a815906183d4b93e017b28e0303006e6cd8ad9c697

    • SSDEEP

      3072:fJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JIa//2uFrSc:MfYOX+wTScR/Xzku9LVwfuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks