General

  • Target

    JaffaCakes118_1bc0f75711deffe44a3b488cfc7e38d56d5b7339797966df00cfd387f2c16766

  • Size

    184KB

  • Sample

    241221-yp5lqsylbq

  • MD5

    542886b8360aa7357599b9372a0587f3

  • SHA1

    e3c54cf8c9883f79be06fd5757fc08b5fda91423

  • SHA256

    1bc0f75711deffe44a3b488cfc7e38d56d5b7339797966df00cfd387f2c16766

  • SHA512

    3d517cafd864187e072cf691049589bb0633b80185524560b148fcfb21d78ad119d509cd58b4d130d2993a4da538af41523920f1f37c84709d56df71d9cd1f31

  • SSDEEP

    3072:+iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao+lzoxss7:+iLVCIT4WK2z1W+CUHZj4Skq/eaocoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_1bc0f75711deffe44a3b488cfc7e38d56d5b7339797966df00cfd387f2c16766

    • Size

      184KB

    • MD5

      542886b8360aa7357599b9372a0587f3

    • SHA1

      e3c54cf8c9883f79be06fd5757fc08b5fda91423

    • SHA256

      1bc0f75711deffe44a3b488cfc7e38d56d5b7339797966df00cfd387f2c16766

    • SHA512

      3d517cafd864187e072cf691049589bb0633b80185524560b148fcfb21d78ad119d509cd58b4d130d2993a4da538af41523920f1f37c84709d56df71d9cd1f31

    • SSDEEP

      3072:+iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao+lzoxss7:+iLVCIT4WK2z1W+CUHZj4Skq/eaocoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks