General

  • Target

    JaffaCakes118_deb643d7577bcb4f5b6a421fc529e542fc2c54fe9d1e44cf225da59c1e24dd53

  • Size

    184KB

  • Sample

    241222-d9b5pssmcr

  • MD5

    75b33191ee9b569abcafde4cfe2cb8b1

  • SHA1

    bd1de57354519aef9ab12889e0b0752265de9405

  • SHA256

    deb643d7577bcb4f5b6a421fc529e542fc2c54fe9d1e44cf225da59c1e24dd53

  • SHA512

    a55210dcf7b5fa556906a3deb686cb2cae9daaf5eb6a2f19f2a20abdedd040f795ae23a988d81a7201069a3b9104949fa686f515fa2fc8e4c5b1ec08e2c6ae6d

  • SSDEEP

    3072:PiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoTlzoxss7:PiLVCIT4WK2z1W+CUHZj4Skq/eaoJoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_deb643d7577bcb4f5b6a421fc529e542fc2c54fe9d1e44cf225da59c1e24dd53

    • Size

      184KB

    • MD5

      75b33191ee9b569abcafde4cfe2cb8b1

    • SHA1

      bd1de57354519aef9ab12889e0b0752265de9405

    • SHA256

      deb643d7577bcb4f5b6a421fc529e542fc2c54fe9d1e44cf225da59c1e24dd53

    • SHA512

      a55210dcf7b5fa556906a3deb686cb2cae9daaf5eb6a2f19f2a20abdedd040f795ae23a988d81a7201069a3b9104949fa686f515fa2fc8e4c5b1ec08e2c6ae6d

    • SSDEEP

      3072:PiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoTlzoxss7:PiLVCIT4WK2z1W+CUHZj4Skq/eaoJoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks