General

  • Target

    JaffaCakes118_a28bbc52cfda4da2bfc24b4f561421d689623bcf6065fb029a09c7a042430191

  • Size

    184KB

  • Sample

    241222-ez2s2stke1

  • MD5

    f029208cfcc8bb650ec1f2aa31f001b8

  • SHA1

    57c1fdae69fd56b5a5832b6e6b7dcc1ae1e38fa4

  • SHA256

    a28bbc52cfda4da2bfc24b4f561421d689623bcf6065fb029a09c7a042430191

  • SHA512

    da4a66b60a78ad006255e165864c324e361f56fa15edd08a5fb896f9a4209b13746f438d60ae65f7ca2797a7658746b42453573b94b2d411ba8344c7ec9e3704

  • SSDEEP

    3072:ziLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoTlzoxss7:ziLVCIT4WK2z1W+CUHZj4Skq/eaoJoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_a28bbc52cfda4da2bfc24b4f561421d689623bcf6065fb029a09c7a042430191

    • Size

      184KB

    • MD5

      f029208cfcc8bb650ec1f2aa31f001b8

    • SHA1

      57c1fdae69fd56b5a5832b6e6b7dcc1ae1e38fa4

    • SHA256

      a28bbc52cfda4da2bfc24b4f561421d689623bcf6065fb029a09c7a042430191

    • SHA512

      da4a66b60a78ad006255e165864c324e361f56fa15edd08a5fb896f9a4209b13746f438d60ae65f7ca2797a7658746b42453573b94b2d411ba8344c7ec9e3704

    • SSDEEP

      3072:ziLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoTlzoxss7:ziLVCIT4WK2z1W+CUHZj4Skq/eaoJoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks