General

  • Target

    JaffaCakes118_38c2549f6e16b950293e67be28a95abaa62856d325005835bc43ef6d3c5b089f

  • Size

    184KB

  • Sample

    241222-glz4eawncz

  • MD5

    be8716d0f54879e6dd4d7a75c8a59dab

  • SHA1

    b17927c6d972d1ec2c62b303b903ed22094e467a

  • SHA256

    38c2549f6e16b950293e67be28a95abaa62856d325005835bc43ef6d3c5b089f

  • SHA512

    e222c2aed4acb7b29d144f603030cb8976c804d56642bcfe3abc4dbfa659f65b65d8001c31155c2fe142cf67eea90501b738b042a31d17734f41254d5f8eafcf

  • SSDEEP

    3072:TiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoIlzoxss7:TiLVCIT4WK2z1W+CUHZj4Skq/eaoWoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_38c2549f6e16b950293e67be28a95abaa62856d325005835bc43ef6d3c5b089f

    • Size

      184KB

    • MD5

      be8716d0f54879e6dd4d7a75c8a59dab

    • SHA1

      b17927c6d972d1ec2c62b303b903ed22094e467a

    • SHA256

      38c2549f6e16b950293e67be28a95abaa62856d325005835bc43ef6d3c5b089f

    • SHA512

      e222c2aed4acb7b29d144f603030cb8976c804d56642bcfe3abc4dbfa659f65b65d8001c31155c2fe142cf67eea90501b738b042a31d17734f41254d5f8eafcf

    • SSDEEP

      3072:TiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoIlzoxss7:TiLVCIT4WK2z1W+CUHZj4Skq/eaoWoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks