General

  • Target

    JaffaCakes118_aa345932bc36202a621b2d6a70d113226f30b6169dc1e2433e0d62d647124630

  • Size

    184KB

  • Sample

    241230-z2gwwa1raz

  • MD5

    c4bcea05d99cd6e9c156c41f97ba8220

  • SHA1

    65dc11900222ba28ba9c763123a8f684bc37cada

  • SHA256

    aa345932bc36202a621b2d6a70d113226f30b6169dc1e2433e0d62d647124630

  • SHA512

    8ba2aeed5918e8b745837beb766476f24a7c57cd99a1a404b8340acafd4cee078ad4f91a16bf4973ba0b004441e94ee6eff34e8f22adc45738d5f44782597219

  • SSDEEP

    3072:c92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMT4rLA:c9NSMOEpQ1Q3ODAr+VU

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_aa345932bc36202a621b2d6a70d113226f30b6169dc1e2433e0d62d647124630

    • Size

      184KB

    • MD5

      c4bcea05d99cd6e9c156c41f97ba8220

    • SHA1

      65dc11900222ba28ba9c763123a8f684bc37cada

    • SHA256

      aa345932bc36202a621b2d6a70d113226f30b6169dc1e2433e0d62d647124630

    • SHA512

      8ba2aeed5918e8b745837beb766476f24a7c57cd99a1a404b8340acafd4cee078ad4f91a16bf4973ba0b004441e94ee6eff34e8f22adc45738d5f44782597219

    • SSDEEP

      3072:c92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMT4rLA:c9NSMOEpQ1Q3ODAr+VU

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks