General

  • Target

    JaffaCakes118_fe9709e932dfd20d3f96855c746118b523ecebc6abfe79a82bf1567435130f9c

  • Size

    184KB

  • Sample

    241222-d9yzgaskd1

  • MD5

    fd02196124ffce686ecec66e1d63ed70

  • SHA1

    51fecef95e25d0832f231cc668ff979637c55446

  • SHA256

    fe9709e932dfd20d3f96855c746118b523ecebc6abfe79a82bf1567435130f9c

  • SHA512

    a87955d3ecb2570fce1258605a350e1627baede7e45414a212a430f07b5b8ee668e0d2537251b89d69856a81bcd62e7b19fd0864428f74115fba172b96cce902

  • SSDEEP

    3072:6iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoSlzoxss7:6iLVCIT4WK2z1W+CUHZj4Skq/eaoYoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_fe9709e932dfd20d3f96855c746118b523ecebc6abfe79a82bf1567435130f9c

    • Size

      184KB

    • MD5

      fd02196124ffce686ecec66e1d63ed70

    • SHA1

      51fecef95e25d0832f231cc668ff979637c55446

    • SHA256

      fe9709e932dfd20d3f96855c746118b523ecebc6abfe79a82bf1567435130f9c

    • SHA512

      a87955d3ecb2570fce1258605a350e1627baede7e45414a212a430f07b5b8ee668e0d2537251b89d69856a81bcd62e7b19fd0864428f74115fba172b96cce902

    • SSDEEP

      3072:6iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoSlzoxss7:6iLVCIT4WK2z1W+CUHZj4Skq/eaoYoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks