General

  • Target

    JaffaCakes118_c3319dc570bcde4095cb686f9ee68057ea5f84ecc6306dbe3736e7aac752d38e

  • Size

    184KB

  • Sample

    241230-xbjlnstjgm

  • MD5

    0d36851b7c3238e022e013be35b839e1

  • SHA1

    5dda4cb12158a9fd0ba6fd5d9ce8baa0e66766f9

  • SHA256

    c3319dc570bcde4095cb686f9ee68057ea5f84ecc6306dbe3736e7aac752d38e

  • SHA512

    93ee5046d26c8de8cb21d312b278526b10619f8c7373c758b35f4082cb2e938819cae8f3937d0a4b02606d11f8af4971d2d6225d828c64da90d6e952cfe9501f

  • SSDEEP

    3072:092qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTIrLA:09NSMOEpQ1Q3ODAr+V0

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_c3319dc570bcde4095cb686f9ee68057ea5f84ecc6306dbe3736e7aac752d38e

    • Size

      184KB

    • MD5

      0d36851b7c3238e022e013be35b839e1

    • SHA1

      5dda4cb12158a9fd0ba6fd5d9ce8baa0e66766f9

    • SHA256

      c3319dc570bcde4095cb686f9ee68057ea5f84ecc6306dbe3736e7aac752d38e

    • SHA512

      93ee5046d26c8de8cb21d312b278526b10619f8c7373c758b35f4082cb2e938819cae8f3937d0a4b02606d11f8af4971d2d6225d828c64da90d6e952cfe9501f

    • SSDEEP

      3072:092qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTIrLA:09NSMOEpQ1Q3ODAr+V0

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks