General

  • Target

    JaffaCakes118_c544184909e1dd230f4ea85d188e568073ae1fea8b89a1da63d66e8a81b09927

  • Size

    184KB

  • Sample

    241221-wwr8wawkcj

  • MD5

    dbea8a294b1bb38d6fed7902715d7e9c

  • SHA1

    c7e1520ff4910c6153bba60e2414ca980cff24b3

  • SHA256

    c544184909e1dd230f4ea85d188e568073ae1fea8b89a1da63d66e8a81b09927

  • SHA512

    8048ad1e70a334dc7d66d71f5a44640b7846ef98153caee46b5ddc4fb82955f4f7d5f9278d5e7efec7ae2ae455f24bf12344b8b27f0a6a098b539cba83c81c93

  • SSDEEP

    3072:9iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaozlzoxss7:9iLVCIT4WK2z1W+CUHZj4Skq/eaopoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_c544184909e1dd230f4ea85d188e568073ae1fea8b89a1da63d66e8a81b09927

    • Size

      184KB

    • MD5

      dbea8a294b1bb38d6fed7902715d7e9c

    • SHA1

      c7e1520ff4910c6153bba60e2414ca980cff24b3

    • SHA256

      c544184909e1dd230f4ea85d188e568073ae1fea8b89a1da63d66e8a81b09927

    • SHA512

      8048ad1e70a334dc7d66d71f5a44640b7846ef98153caee46b5ddc4fb82955f4f7d5f9278d5e7efec7ae2ae455f24bf12344b8b27f0a6a098b539cba83c81c93

    • SSDEEP

      3072:9iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaozlzoxss7:9iLVCIT4WK2z1W+CUHZj4Skq/eaopoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks