General

  • Target

    JaffaCakes118_0f58f3e58963b5feb57e9bffa32e7d6dc4663ea3b3b662c0c61aa949598f43be

  • Size

    184KB

  • Sample

    241230-y8cp3axldj

  • MD5

    e31bac3e186a5ca386da97aacd16ad62

  • SHA1

    46bfe0772ee5f182eff3c969188a912546da8cce

  • SHA256

    0f58f3e58963b5feb57e9bffa32e7d6dc4663ea3b3b662c0c61aa949598f43be

  • SHA512

    77676e8cb88aeb2ec3d7af660fe8019e955a930160103f64c67d2371c8432f03c389b83375ae03f5b21641f66a39f1f11d5955ae3d6524407b4f09fa1df7806b

  • SSDEEP

    3072:qJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8J2a//2uFrSc:rfYOX+wTScR/Xzku9LVwluG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_0f58f3e58963b5feb57e9bffa32e7d6dc4663ea3b3b662c0c61aa949598f43be

    • Size

      184KB

    • MD5

      e31bac3e186a5ca386da97aacd16ad62

    • SHA1

      46bfe0772ee5f182eff3c969188a912546da8cce

    • SHA256

      0f58f3e58963b5feb57e9bffa32e7d6dc4663ea3b3b662c0c61aa949598f43be

    • SHA512

      77676e8cb88aeb2ec3d7af660fe8019e955a930160103f64c67d2371c8432f03c389b83375ae03f5b21641f66a39f1f11d5955ae3d6524407b4f09fa1df7806b

    • SSDEEP

      3072:qJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8J2a//2uFrSc:rfYOX+wTScR/Xzku9LVwluG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks