General

  • Target

    JaffaCakes118_478df23ef788431e42a6918634442edacf202c4fbc4db2b63e941b304f38fc4c

  • Size

    184KB

  • Sample

    241230-yrtx1sypg1

  • MD5

    f9c3ed0d597692bbd7ae80d843778eac

  • SHA1

    89dc41003ca85db38120a8f1e111a7c1b132d0a5

  • SHA256

    478df23ef788431e42a6918634442edacf202c4fbc4db2b63e941b304f38fc4c

  • SHA512

    2355272b75d2076f4dfff098f2c6ac259c9177a6fab5fd4396c91496013681268474b8c4c72c8e9f2498f1930b8e901c0c7c99aceb27f3bcb16539bf0d0f6134

  • SSDEEP

    3072:vJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jma//2uFrSc:8fYOX+wTScR/Xzku9LVwVuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_478df23ef788431e42a6918634442edacf202c4fbc4db2b63e941b304f38fc4c

    • Size

      184KB

    • MD5

      f9c3ed0d597692bbd7ae80d843778eac

    • SHA1

      89dc41003ca85db38120a8f1e111a7c1b132d0a5

    • SHA256

      478df23ef788431e42a6918634442edacf202c4fbc4db2b63e941b304f38fc4c

    • SHA512

      2355272b75d2076f4dfff098f2c6ac259c9177a6fab5fd4396c91496013681268474b8c4c72c8e9f2498f1930b8e901c0c7c99aceb27f3bcb16539bf0d0f6134

    • SSDEEP

      3072:vJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jma//2uFrSc:8fYOX+wTScR/Xzku9LVwVuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks