General

  • Target

    JaffaCakes118_f629d3d08b77a96cd69cfb93f1193a784397f6eb36e8d8b70552761f51e43474

  • Size

    184KB

  • Sample

    241230-y89d2aznfy

  • MD5

    a216a5f1cc6a13f77377369a5494d359

  • SHA1

    6d2e49b112796fc3bad13ed2daad789d74246aeb

  • SHA256

    f629d3d08b77a96cd69cfb93f1193a784397f6eb36e8d8b70552761f51e43474

  • SHA512

    0d6646d0c0d16c48a73d145e07f4804da0d01ac3fe2e9b74a5bd0d0cc6137b12972d6bad318a895c5fb3df9cb7f8732c236dc28a28163d8fda4eb5001b9e3b4e

  • SSDEEP

    3072:rJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JTa//2uFrSc:wfYOX+wTScR/Xzku9LVwsuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_f629d3d08b77a96cd69cfb93f1193a784397f6eb36e8d8b70552761f51e43474

    • Size

      184KB

    • MD5

      a216a5f1cc6a13f77377369a5494d359

    • SHA1

      6d2e49b112796fc3bad13ed2daad789d74246aeb

    • SHA256

      f629d3d08b77a96cd69cfb93f1193a784397f6eb36e8d8b70552761f51e43474

    • SHA512

      0d6646d0c0d16c48a73d145e07f4804da0d01ac3fe2e9b74a5bd0d0cc6137b12972d6bad318a895c5fb3df9cb7f8732c236dc28a28163d8fda4eb5001b9e3b4e

    • SSDEEP

      3072:rJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JTa//2uFrSc:wfYOX+wTScR/Xzku9LVwsuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks