General

  • Target

    JaffaCakes118_27585c5b3462d151701c438b6be48211c01b578f4e56ad76c8c1d81c40c0327f

  • Size

    184KB

  • Sample

    241222-fhkc4svkcj

  • MD5

    e2e8969fbd16a60fd4b680df356ca7bf

  • SHA1

    9ad687698489857968b484cf83084cc33fbdbb5a

  • SHA256

    27585c5b3462d151701c438b6be48211c01b578f4e56ad76c8c1d81c40c0327f

  • SHA512

    407838dd756e79e9c069116da639245464284f7869be6b74a2dbd7492a7c84f90e3b37a0fde0780611b783b5e757d35e08088207388c8b5e01c8468d7c4ddfc2

  • SSDEEP

    3072:hiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoulzoxss7:hiLVCIT4WK2z1W+CUHZj4Skq/eaosoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_27585c5b3462d151701c438b6be48211c01b578f4e56ad76c8c1d81c40c0327f

    • Size

      184KB

    • MD5

      e2e8969fbd16a60fd4b680df356ca7bf

    • SHA1

      9ad687698489857968b484cf83084cc33fbdbb5a

    • SHA256

      27585c5b3462d151701c438b6be48211c01b578f4e56ad76c8c1d81c40c0327f

    • SHA512

      407838dd756e79e9c069116da639245464284f7869be6b74a2dbd7492a7c84f90e3b37a0fde0780611b783b5e757d35e08088207388c8b5e01c8468d7c4ddfc2

    • SSDEEP

      3072:hiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoulzoxss7:hiLVCIT4WK2z1W+CUHZj4Skq/eaosoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks