General

  • Target

    JaffaCakes118_d70c110d6c58965abda3243162f2ed992dcc97440332216ec7fe59914bacd22d

  • Size

    184KB

  • Sample

    241230-zb6sbaxmhm

  • MD5

    875f245f150d8775cfa7964171285441

  • SHA1

    fc23aebfa77e907a3798f1fcbb13f361cb432434

  • SHA256

    d70c110d6c58965abda3243162f2ed992dcc97440332216ec7fe59914bacd22d

  • SHA512

    ce8c40e2b3e8051cb9fb48e91f688b853923ada37181b1e85979dbf087d5cb0501aeca52784a34f9bfacd00b622c4d21737cba0deb0822e0e76323088d6cdb0f

  • SSDEEP

    3072:w92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTUrLA:w9NSMOEpQ1Q3ODAr+VQ

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_d70c110d6c58965abda3243162f2ed992dcc97440332216ec7fe59914bacd22d

    • Size

      184KB

    • MD5

      875f245f150d8775cfa7964171285441

    • SHA1

      fc23aebfa77e907a3798f1fcbb13f361cb432434

    • SHA256

      d70c110d6c58965abda3243162f2ed992dcc97440332216ec7fe59914bacd22d

    • SHA512

      ce8c40e2b3e8051cb9fb48e91f688b853923ada37181b1e85979dbf087d5cb0501aeca52784a34f9bfacd00b622c4d21737cba0deb0822e0e76323088d6cdb0f

    • SSDEEP

      3072:w92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTUrLA:w9NSMOEpQ1Q3ODAr+VQ

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks