General

  • Target

    JaffaCakes118_672153b8050934372de1b68828e6a727665c93bc58f4263acff74f5db1256367

  • Size

    184KB

  • Sample

    241221-x762vaxmds

  • MD5

    7285142372745290ac57a70ca9e8546b

  • SHA1

    30105f21ec1210cf19a00f11d5a6bacd2ba84b2e

  • SHA256

    672153b8050934372de1b68828e6a727665c93bc58f4263acff74f5db1256367

  • SHA512

    3699df4f01ec89ffe233129631210bdfe0ee1feae0b6def471b0185f2b1ea3450e89fd6115372ec1f42110be2d510a58dcb29814e823accc383f96f5bd62b578

  • SSDEEP

    3072:fiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoDlzoxss7:fiLVCIT4WK2z1W+CUHZj4Skq/eaoZoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_672153b8050934372de1b68828e6a727665c93bc58f4263acff74f5db1256367

    • Size

      184KB

    • MD5

      7285142372745290ac57a70ca9e8546b

    • SHA1

      30105f21ec1210cf19a00f11d5a6bacd2ba84b2e

    • SHA256

      672153b8050934372de1b68828e6a727665c93bc58f4263acff74f5db1256367

    • SHA512

      3699df4f01ec89ffe233129631210bdfe0ee1feae0b6def471b0185f2b1ea3450e89fd6115372ec1f42110be2d510a58dcb29814e823accc383f96f5bd62b578

    • SSDEEP

      3072:fiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoDlzoxss7:fiLVCIT4WK2z1W+CUHZj4Skq/eaoZoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks