General

  • Target

    JaffaCakes118_f25f649c289c650353f69f33377a44c15bf165be814600c468c990526a2e4c3f

  • Size

    184KB

  • Sample

    241222-e9eq9stna1

  • MD5

    f6b4a5317c817b3daef9d876184c7ecc

  • SHA1

    ebe49b9da6f182c12e6506fc3e2ef0fc007dfecd

  • SHA256

    f25f649c289c650353f69f33377a44c15bf165be814600c468c990526a2e4c3f

  • SHA512

    3aa15085ae22bd16202a19e78ba07ad0eadfc6ce43b3174363a4b80fad91b616b5102e3b79095459f1f238667ebf651395780c11a242e10234c294908a9b7905

  • SSDEEP

    3072:NiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoblzoxss7:NiLVCIT4WK2z1W+CUHZj4Skq/eaohoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_f25f649c289c650353f69f33377a44c15bf165be814600c468c990526a2e4c3f

    • Size

      184KB

    • MD5

      f6b4a5317c817b3daef9d876184c7ecc

    • SHA1

      ebe49b9da6f182c12e6506fc3e2ef0fc007dfecd

    • SHA256

      f25f649c289c650353f69f33377a44c15bf165be814600c468c990526a2e4c3f

    • SHA512

      3aa15085ae22bd16202a19e78ba07ad0eadfc6ce43b3174363a4b80fad91b616b5102e3b79095459f1f238667ebf651395780c11a242e10234c294908a9b7905

    • SSDEEP

      3072:NiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoblzoxss7:NiLVCIT4WK2z1W+CUHZj4Skq/eaohoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks