General

  • Target

    JaffaCakes118_f3bdba3244e8b97adb68d4ee41bd1a92dcbc567fd0456e0194d04e471ab2ba04

  • Size

    184KB

  • Sample

    241221-y1z6dsyngl

  • MD5

    e20b551778ca5b9d849244eea7e90662

  • SHA1

    e01bce593fa335f775a817cfd1517af6123bf5be

  • SHA256

    f3bdba3244e8b97adb68d4ee41bd1a92dcbc567fd0456e0194d04e471ab2ba04

  • SHA512

    f15d251ef040fb3ebc2ac0a631684f3762ad3b6286e3de19461e87a14221e5c18ce3ff020cc51fdb82e4213d75539e9d879c76ee8e1f1a933bd7cad1ee0a57f6

  • SSDEEP

    3072:6iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao2lzoxss7:6iLVCIT4WK2z1W+CUHZj4Skq/eaokoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_f3bdba3244e8b97adb68d4ee41bd1a92dcbc567fd0456e0194d04e471ab2ba04

    • Size

      184KB

    • MD5

      e20b551778ca5b9d849244eea7e90662

    • SHA1

      e01bce593fa335f775a817cfd1517af6123bf5be

    • SHA256

      f3bdba3244e8b97adb68d4ee41bd1a92dcbc567fd0456e0194d04e471ab2ba04

    • SHA512

      f15d251ef040fb3ebc2ac0a631684f3762ad3b6286e3de19461e87a14221e5c18ce3ff020cc51fdb82e4213d75539e9d879c76ee8e1f1a933bd7cad1ee0a57f6

    • SSDEEP

      3072:6iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao2lzoxss7:6iLVCIT4WK2z1W+CUHZj4Skq/eaokoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks