General

  • Target

    JaffaCakes118_0ed6cd3602eac41994684e1b757d9300db799e780c4c42f9f6a81ba6e9c7268b

  • Size

    184KB

  • Sample

    241230-ysw4rswngn

  • MD5

    3c97d6b68ec3457a7ed9298958b3e2cc

  • SHA1

    a8482ca5146657fad71252b0f69c199b24b35266

  • SHA256

    0ed6cd3602eac41994684e1b757d9300db799e780c4c42f9f6a81ba6e9c7268b

  • SHA512

    d1188af76e1e3a6330f8a1d2fcf87619b682627aa89e75f90416dd73f57a936d41ff6b64bc71f2508c1d094e0a1c4a74322677dd16432790b0f16a7466b5d5fd

  • SSDEEP

    3072:TJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jda//2uFrSc:YfYOX+wTScR/Xzku9LVwKuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_0ed6cd3602eac41994684e1b757d9300db799e780c4c42f9f6a81ba6e9c7268b

    • Size

      184KB

    • MD5

      3c97d6b68ec3457a7ed9298958b3e2cc

    • SHA1

      a8482ca5146657fad71252b0f69c199b24b35266

    • SHA256

      0ed6cd3602eac41994684e1b757d9300db799e780c4c42f9f6a81ba6e9c7268b

    • SHA512

      d1188af76e1e3a6330f8a1d2fcf87619b682627aa89e75f90416dd73f57a936d41ff6b64bc71f2508c1d094e0a1c4a74322677dd16432790b0f16a7466b5d5fd

    • SSDEEP

      3072:TJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jda//2uFrSc:YfYOX+wTScR/Xzku9LVwKuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks