General

  • Target

    JaffaCakes118_b7c61a198eac66984470f9efd21edc7eb66deb4d04a9f178b144e7b790e397f0

  • Size

    184KB

  • Sample

    241222-e17exstmcq

  • MD5

    f9bd8305c29796c62307120cee91061a

  • SHA1

    89bc5eba692673b699d91052d1f0dce015c9b230

  • SHA256

    b7c61a198eac66984470f9efd21edc7eb66deb4d04a9f178b144e7b790e397f0

  • SHA512

    ec70cb8e08be63b7da864ab810331e5b81c947352551d45b91c502bc6fbd161ac350f386e9198730839da5ebfd359f2feef3f7e816ff90c1f4033bdbb0cb77da

  • SSDEEP

    3072:PiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoJlzoxss7:PiLVCIT4WK2z1W+CUHZj4Skq/eaoXoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_b7c61a198eac66984470f9efd21edc7eb66deb4d04a9f178b144e7b790e397f0

    • Size

      184KB

    • MD5

      f9bd8305c29796c62307120cee91061a

    • SHA1

      89bc5eba692673b699d91052d1f0dce015c9b230

    • SHA256

      b7c61a198eac66984470f9efd21edc7eb66deb4d04a9f178b144e7b790e397f0

    • SHA512

      ec70cb8e08be63b7da864ab810331e5b81c947352551d45b91c502bc6fbd161ac350f386e9198730839da5ebfd359f2feef3f7e816ff90c1f4033bdbb0cb77da

    • SSDEEP

      3072:PiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoJlzoxss7:PiLVCIT4WK2z1W+CUHZj4Skq/eaoXoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks