General

  • Target

    JaffaCakes118_6d892d65013f68b694d811125756102a8f373f736415132c8323e003e6a2ae42

  • Size

    184KB

  • Sample

    241221-zk7e7szkan

  • MD5

    2b11a41f4b627867ce2d482b817b66d9

  • SHA1

    ce362223877c11eb5c41be79bfec1ec3005b634f

  • SHA256

    6d892d65013f68b694d811125756102a8f373f736415132c8323e003e6a2ae42

  • SHA512

    3e5e51e4b51c7b11c8dcddc5cdec8e23531bf97f79241076525955aa758af8a4b644e9547a0a532ca8ab55e07653d0c624c2e68f3b7d56e89f82d3acd0336031

  • SSDEEP

    3072:OiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoblzoxss7:OiLVCIT4WK2z1W+CUHZj4Skq/eaohoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_6d892d65013f68b694d811125756102a8f373f736415132c8323e003e6a2ae42

    • Size

      184KB

    • MD5

      2b11a41f4b627867ce2d482b817b66d9

    • SHA1

      ce362223877c11eb5c41be79bfec1ec3005b634f

    • SHA256

      6d892d65013f68b694d811125756102a8f373f736415132c8323e003e6a2ae42

    • SHA512

      3e5e51e4b51c7b11c8dcddc5cdec8e23531bf97f79241076525955aa758af8a4b644e9547a0a532ca8ab55e07653d0c624c2e68f3b7d56e89f82d3acd0336031

    • SSDEEP

      3072:OiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoblzoxss7:OiLVCIT4WK2z1W+CUHZj4Skq/eaohoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks