General

  • Target

    JaffaCakes118_804b6f67f890904f8b598450e8a3c32bd389b9543ae94e776324f55a305dedef

  • Size

    184KB

  • Sample

    241222-egrv5aspfr

  • MD5

    02e29d72a7265f1f95adb6592036cc6b

  • SHA1

    248c39d93aa94ee99e4b42d5da3b62fa01dbcb21

  • SHA256

    804b6f67f890904f8b598450e8a3c32bd389b9543ae94e776324f55a305dedef

  • SHA512

    19d041a8897306b36d0b6b2ba3f373b94c763c3607984b764175aaaa2980fe46ca6b65c8de3ceeb389dd9d381721665a0c30e7d829f9ab9944cc2ec9850490e3

  • SSDEEP

    3072:riLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoTlzoxss7:riLVCIT4WK2z1W+CUHZj4Skq/eaoJoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_804b6f67f890904f8b598450e8a3c32bd389b9543ae94e776324f55a305dedef

    • Size

      184KB

    • MD5

      02e29d72a7265f1f95adb6592036cc6b

    • SHA1

      248c39d93aa94ee99e4b42d5da3b62fa01dbcb21

    • SHA256

      804b6f67f890904f8b598450e8a3c32bd389b9543ae94e776324f55a305dedef

    • SHA512

      19d041a8897306b36d0b6b2ba3f373b94c763c3607984b764175aaaa2980fe46ca6b65c8de3ceeb389dd9d381721665a0c30e7d829f9ab9944cc2ec9850490e3

    • SSDEEP

      3072:riLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoTlzoxss7:riLVCIT4WK2z1W+CUHZj4Skq/eaoJoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks