General

  • Target

    JaffaCakes118_5db1705eb59d57aa2d2ddc11aa37219bf675d1da92a8f2d4b2bc81dcfc6370c2

  • Size

    184KB

  • Sample

    241230-yy6v6azjhw

  • MD5

    d78c285e2cc48c9182d2ab03cd3230bd

  • SHA1

    e3e967d6a8772e7d79197b6bf199972189f7206c

  • SHA256

    5db1705eb59d57aa2d2ddc11aa37219bf675d1da92a8f2d4b2bc81dcfc6370c2

  • SHA512

    071fb1fdce75c90ed7ff60a07fc76a3d2846119987f2db920a5c55aebf98b35661e086ea3715518241855fc1cdd1f9b392914152c0d9cd23f5bb16739e6e5157

  • SSDEEP

    3072:yJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JGa//2uFrSc:zfYOX+wTScR/Xzku9LVwluG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_5db1705eb59d57aa2d2ddc11aa37219bf675d1da92a8f2d4b2bc81dcfc6370c2

    • Size

      184KB

    • MD5

      d78c285e2cc48c9182d2ab03cd3230bd

    • SHA1

      e3e967d6a8772e7d79197b6bf199972189f7206c

    • SHA256

      5db1705eb59d57aa2d2ddc11aa37219bf675d1da92a8f2d4b2bc81dcfc6370c2

    • SHA512

      071fb1fdce75c90ed7ff60a07fc76a3d2846119987f2db920a5c55aebf98b35661e086ea3715518241855fc1cdd1f9b392914152c0d9cd23f5bb16739e6e5157

    • SSDEEP

      3072:yJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JGa//2uFrSc:zfYOX+wTScR/Xzku9LVwluG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks