General

  • Target

    JaffaCakes118_61c4c3e3483ee59c8f43c9140adfaa7044d37e08ed3d49413f8cbc64d6564b01

  • Size

    184KB

  • Sample

    241230-zz63zsynfr

  • MD5

    08f61b3b20ab35420b26b02e3b9924b1

  • SHA1

    7788e19442965e469495ddb45aa96f2d5202fa8d

  • SHA256

    61c4c3e3483ee59c8f43c9140adfaa7044d37e08ed3d49413f8cbc64d6564b01

  • SHA512

    bc1af75388c1b42a9aa0518283e2d673b3b563d8d8f1db61b687d1b53fdf10590219d66db59591e633dc9b9e45638bd64622b5aea189b6dae816c21f99309bc8

  • SSDEEP

    3072:9JQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JSa//2uFrSc:GfYOX+wTScR/Xzku9LVwpuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_61c4c3e3483ee59c8f43c9140adfaa7044d37e08ed3d49413f8cbc64d6564b01

    • Size

      184KB

    • MD5

      08f61b3b20ab35420b26b02e3b9924b1

    • SHA1

      7788e19442965e469495ddb45aa96f2d5202fa8d

    • SHA256

      61c4c3e3483ee59c8f43c9140adfaa7044d37e08ed3d49413f8cbc64d6564b01

    • SHA512

      bc1af75388c1b42a9aa0518283e2d673b3b563d8d8f1db61b687d1b53fdf10590219d66db59591e633dc9b9e45638bd64622b5aea189b6dae816c21f99309bc8

    • SSDEEP

      3072:9JQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JSa//2uFrSc:GfYOX+wTScR/Xzku9LVwpuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks