General

  • Target

    JaffaCakes118_8c3c521cba5eb340a9040da3c621a25e03a77d4e7633bd9a738d47af84cbf5d6

  • Size

    184KB

  • Sample

    241230-ztfc3sylbr

  • MD5

    3e975ea9ed72a0aa2971f1214cef7dff

  • SHA1

    1fffbe78baa5dbef92c0e2b25d507672cecb1aaa

  • SHA256

    8c3c521cba5eb340a9040da3c621a25e03a77d4e7633bd9a738d47af84cbf5d6

  • SHA512

    e92b2d5eb0bd7e1a4f3e555f89a54ee9796e578894a77c910ded09efed9233466549abf04e0b05c85934ef808d8136316356204ec60db62d65e8e4c3ff212d08

  • SSDEEP

    3072:iiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoLlzoxss7:iiLVCIT4WK2z1W+CUHZj4Skq/eaoxoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_8c3c521cba5eb340a9040da3c621a25e03a77d4e7633bd9a738d47af84cbf5d6

    • Size

      184KB

    • MD5

      3e975ea9ed72a0aa2971f1214cef7dff

    • SHA1

      1fffbe78baa5dbef92c0e2b25d507672cecb1aaa

    • SHA256

      8c3c521cba5eb340a9040da3c621a25e03a77d4e7633bd9a738d47af84cbf5d6

    • SHA512

      e92b2d5eb0bd7e1a4f3e555f89a54ee9796e578894a77c910ded09efed9233466549abf04e0b05c85934ef808d8136316356204ec60db62d65e8e4c3ff212d08

    • SSDEEP

      3072:iiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoLlzoxss7:iiLVCIT4WK2z1W+CUHZj4Skq/eaoxoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks