General

  • Target

    JaffaCakes118_040889ecb7aec4db40aa5b9e172c8c9f8b32f5de35235b3a5f11594698720f78

  • Size

    184KB

  • Sample

    241230-xmyjzawpc1

  • MD5

    6d6e244fd71759c7bbb5a2121682cd22

  • SHA1

    74640474e45da12a70de643042c34b33d6fdd6e7

  • SHA256

    040889ecb7aec4db40aa5b9e172c8c9f8b32f5de35235b3a5f11594698720f78

  • SHA512

    21f31274f501e0931409ad60b47b259442ed2713e20ddba67c8e182a8c779ba8921414373283ce383984d4e0e83c2f5348d16d8596d6151d6f3f30354f4b1859

  • SSDEEP

    3072:T92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTMrLA:T9NSMOEpQ1Q3ODAr+VY

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_040889ecb7aec4db40aa5b9e172c8c9f8b32f5de35235b3a5f11594698720f78

    • Size

      184KB

    • MD5

      6d6e244fd71759c7bbb5a2121682cd22

    • SHA1

      74640474e45da12a70de643042c34b33d6fdd6e7

    • SHA256

      040889ecb7aec4db40aa5b9e172c8c9f8b32f5de35235b3a5f11594698720f78

    • SHA512

      21f31274f501e0931409ad60b47b259442ed2713e20ddba67c8e182a8c779ba8921414373283ce383984d4e0e83c2f5348d16d8596d6151d6f3f30354f4b1859

    • SSDEEP

      3072:T92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTMrLA:T9NSMOEpQ1Q3ODAr+VY

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks