General

  • Target

    JaffaCakes118_1e25ab433029620adc4d1f50f3ea21fc0dfe80af71a551afe603051c53e98d4f

  • Size

    184KB

  • Sample

    241230-xphljatpdq

  • MD5

    06dd9986eaafdb25eb9ea11afda5cda1

  • SHA1

    b23d887aaf42f0b89b9e0f4147a33407d5649b1a

  • SHA256

    1e25ab433029620adc4d1f50f3ea21fc0dfe80af71a551afe603051c53e98d4f

  • SHA512

    21389772ea818a598c065bd502a4376111ae90276de93703063612dfb6d54159bb2dfc3de27a87ddf3c149355de92d79e62a8e7a4341f70b4e55567443c79c1e

  • SSDEEP

    3072:iJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JCa//2uFrSc:DfYOX+wTScR/Xzku9LVwBuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_1e25ab433029620adc4d1f50f3ea21fc0dfe80af71a551afe603051c53e98d4f

    • Size

      184KB

    • MD5

      06dd9986eaafdb25eb9ea11afda5cda1

    • SHA1

      b23d887aaf42f0b89b9e0f4147a33407d5649b1a

    • SHA256

      1e25ab433029620adc4d1f50f3ea21fc0dfe80af71a551afe603051c53e98d4f

    • SHA512

      21389772ea818a598c065bd502a4376111ae90276de93703063612dfb6d54159bb2dfc3de27a87ddf3c149355de92d79e62a8e7a4341f70b4e55567443c79c1e

    • SSDEEP

      3072:iJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JCa//2uFrSc:DfYOX+wTScR/Xzku9LVwBuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks