General

  • Target

    JaffaCakes118_504eee198201bf09fb0dae207b651ca6213e226aed7c8847b822ead88c2dc591

  • Size

    184KB

  • Sample

    241230-z64w7sskbs

  • MD5

    8210cb8446df5ce970fc01f73037470f

  • SHA1

    79aab26fe26226afffc9772177dea5ff9ac64d42

  • SHA256

    504eee198201bf09fb0dae207b651ca6213e226aed7c8847b822ead88c2dc591

  • SHA512

    dd4d8ff9df136109045c092ba4a1f80d3e99e1d924da6ceaa2d0ee1d9b0600806b439f8bd9550fc4a51a38d1f63d741141f249c53364cb0385f79c062520eaae

  • SSDEEP

    3072:a92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTPrLA:a9NSMOEpQ1Q3ODAr+VH

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_504eee198201bf09fb0dae207b651ca6213e226aed7c8847b822ead88c2dc591

    • Size

      184KB

    • MD5

      8210cb8446df5ce970fc01f73037470f

    • SHA1

      79aab26fe26226afffc9772177dea5ff9ac64d42

    • SHA256

      504eee198201bf09fb0dae207b651ca6213e226aed7c8847b822ead88c2dc591

    • SHA512

      dd4d8ff9df136109045c092ba4a1f80d3e99e1d924da6ceaa2d0ee1d9b0600806b439f8bd9550fc4a51a38d1f63d741141f249c53364cb0385f79c062520eaae

    • SSDEEP

      3072:a92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTPrLA:a9NSMOEpQ1Q3ODAr+VH

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks