General

  • Target

    JaffaCakes118_f80ed4a423550f6e15e19401872f3271677e8d8f283370bfc720cf1e97c48379

  • Size

    184KB

  • Sample

    241222-k18kwasmcr

  • MD5

    11820aed3fe252841f415ece7210163e

  • SHA1

    89596653c46fc5b343cccd5a3c5888d42e0a181c

  • SHA256

    f80ed4a423550f6e15e19401872f3271677e8d8f283370bfc720cf1e97c48379

  • SHA512

    7d854c96012a627ae62520f07741dd4f54d1d6c6837136813b16e26cd3f7de33a71311613694e736eb8560e6897b939b41008a00011ba624cad378cde47d6e98

  • SSDEEP

    3072:SiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaowlzoxss7:SiLVCIT4WK2z1W+CUHZj4Skq/eaoOoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_f80ed4a423550f6e15e19401872f3271677e8d8f283370bfc720cf1e97c48379

    • Size

      184KB

    • MD5

      11820aed3fe252841f415ece7210163e

    • SHA1

      89596653c46fc5b343cccd5a3c5888d42e0a181c

    • SHA256

      f80ed4a423550f6e15e19401872f3271677e8d8f283370bfc720cf1e97c48379

    • SHA512

      7d854c96012a627ae62520f07741dd4f54d1d6c6837136813b16e26cd3f7de33a71311613694e736eb8560e6897b939b41008a00011ba624cad378cde47d6e98

    • SSDEEP

      3072:SiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaowlzoxss7:SiLVCIT4WK2z1W+CUHZj4Skq/eaoOoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks