General

  • Target

    JaffaCakes118_d4c51014ee137e76c8d6bcd5e51eaf27970456ed672475e66ca04e75c5227aa3

  • Size

    184KB

  • Sample

    241222-pp46jaxrfs

  • MD5

    a63cc17f33360450d49ff3ba3c9cbcfd

  • SHA1

    13f5945d2bc10b8848fb446b365b81d6c9a0caea

  • SHA256

    d4c51014ee137e76c8d6bcd5e51eaf27970456ed672475e66ca04e75c5227aa3

  • SHA512

    8517b5a34755bfd41cdeee0d03cb85308bfe6297003a4ea209fa52ee68c0d477980c15cd22d0f8d6d00462fa49c3c9df0420c0c5b522cccd53623a69fdc42b90

  • SSDEEP

    3072:iiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoTlzoxss7:iiLVCIT4WK2z1W+CUHZj4Skq/eaoJoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_d4c51014ee137e76c8d6bcd5e51eaf27970456ed672475e66ca04e75c5227aa3

    • Size

      184KB

    • MD5

      a63cc17f33360450d49ff3ba3c9cbcfd

    • SHA1

      13f5945d2bc10b8848fb446b365b81d6c9a0caea

    • SHA256

      d4c51014ee137e76c8d6bcd5e51eaf27970456ed672475e66ca04e75c5227aa3

    • SHA512

      8517b5a34755bfd41cdeee0d03cb85308bfe6297003a4ea209fa52ee68c0d477980c15cd22d0f8d6d00462fa49c3c9df0420c0c5b522cccd53623a69fdc42b90

    • SSDEEP

      3072:iiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoTlzoxss7:iiLVCIT4WK2z1W+CUHZj4Skq/eaoJoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks