General

  • Target

    JaffaCakes118_377df62531d58d26b481f839838cdabc45bf4e081a3e28c2857beed44cff4051

  • Size

    184KB

  • Sample

    241230-yys93azjfy

  • MD5

    d2586f81543985b014c6dc10d1e387c4

  • SHA1

    cb5f6946a1cc96bbd4f1399bc4db337d7d389172

  • SHA256

    377df62531d58d26b481f839838cdabc45bf4e081a3e28c2857beed44cff4051

  • SHA512

    b4b9f2cf2afa22485e34514f3df7dd85f76955d07933725c2be69c29d30a38f20b3a8468bd4af2b3e2651d245a37b7967c8d2bff0635c91cae125f67a4b6feef

  • SSDEEP

    3072:fJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JLa//2uFrSc:MfYOX+wTScR/Xzku9LVwouG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_377df62531d58d26b481f839838cdabc45bf4e081a3e28c2857beed44cff4051

    • Size

      184KB

    • MD5

      d2586f81543985b014c6dc10d1e387c4

    • SHA1

      cb5f6946a1cc96bbd4f1399bc4db337d7d389172

    • SHA256

      377df62531d58d26b481f839838cdabc45bf4e081a3e28c2857beed44cff4051

    • SHA512

      b4b9f2cf2afa22485e34514f3df7dd85f76955d07933725c2be69c29d30a38f20b3a8468bd4af2b3e2651d245a37b7967c8d2bff0635c91cae125f67a4b6feef

    • SSDEEP

      3072:fJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JLa//2uFrSc:MfYOX+wTScR/Xzku9LVwouG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks