General

  • Target

    JaffaCakes118_e40d9ce041d79c413d6ae412b72eed137625bc8da42a69a4ba34793edd24a349

  • Size

    184KB

  • Sample

    241230-y362qazlg1

  • MD5

    34aa943e9d8ab8dbe3b37f9bfda546f6

  • SHA1

    ff71a072a27c899774bfa67c58f0aae7c92f9262

  • SHA256

    e40d9ce041d79c413d6ae412b72eed137625bc8da42a69a4ba34793edd24a349

  • SHA512

    e6d311ee73e4985344605ba717331a620ea846f7db569eb91896f46c1fa53a3092a0c3289562ac5e7ca512a46ce07bb3a5c88bac3d311e387f985e93a144dc6c

  • SSDEEP

    3072:U92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTIrLA:U9NSMOEpQ1Q3ODAr+V0

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_e40d9ce041d79c413d6ae412b72eed137625bc8da42a69a4ba34793edd24a349

    • Size

      184KB

    • MD5

      34aa943e9d8ab8dbe3b37f9bfda546f6

    • SHA1

      ff71a072a27c899774bfa67c58f0aae7c92f9262

    • SHA256

      e40d9ce041d79c413d6ae412b72eed137625bc8da42a69a4ba34793edd24a349

    • SHA512

      e6d311ee73e4985344605ba717331a620ea846f7db569eb91896f46c1fa53a3092a0c3289562ac5e7ca512a46ce07bb3a5c88bac3d311e387f985e93a144dc6c

    • SSDEEP

      3072:U92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTIrLA:U9NSMOEpQ1Q3ODAr+V0

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks