General

  • Target

    JaffaCakes118_6bee0add43a685552389928389bd430c217ed52dc8da999f8e90913fe258c7d4

  • Size

    184KB

  • Sample

    241230-zyktcs1pfw

  • MD5

    52e58a85189f584b6ff157b93f0a75e3

  • SHA1

    bddd4b6d35c9255e50b94f52c288f10a858f99a4

  • SHA256

    6bee0add43a685552389928389bd430c217ed52dc8da999f8e90913fe258c7d4

  • SHA512

    2f77749c742e18a5240fa068b94e68bb049c6ae625132e410f6560d80462e4e65c2a097e126cca5b48b1fa799ef97efd11fbfb05cfbb74dad4914de07f60cd94

  • SSDEEP

    3072:RJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jza//2uFrSc:yfYOX+wTScR/Xzku9LVwMuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_6bee0add43a685552389928389bd430c217ed52dc8da999f8e90913fe258c7d4

    • Size

      184KB

    • MD5

      52e58a85189f584b6ff157b93f0a75e3

    • SHA1

      bddd4b6d35c9255e50b94f52c288f10a858f99a4

    • SHA256

      6bee0add43a685552389928389bd430c217ed52dc8da999f8e90913fe258c7d4

    • SHA512

      2f77749c742e18a5240fa068b94e68bb049c6ae625132e410f6560d80462e4e65c2a097e126cca5b48b1fa799ef97efd11fbfb05cfbb74dad4914de07f60cd94

    • SSDEEP

      3072:RJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jza//2uFrSc:yfYOX+wTScR/Xzku9LVwMuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks