General

  • Target

    JaffaCakes118_94727117f7ebdce490b4698e582ae41e08a6795f053c2d35fbaf09c859724818

  • Size

    184KB

  • Sample

    241222-pxwjcsypfq

  • MD5

    ab1bb41d92bcf0212b818cc8289c1b25

  • SHA1

    f82dd73cde84447e521d4494ff355968bf9c7ad8

  • SHA256

    94727117f7ebdce490b4698e582ae41e08a6795f053c2d35fbaf09c859724818

  • SHA512

    f3d3c9c47b03b29095ed3e9cf72baabb31368457d6bfeb5d40e0c9e49d0340c6cd646bab09a9524f6ba94de0d53b536005314fccac107866861be4e09b4e33bd

  • SSDEEP

    3072:TiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoflzoxss7:TiLVCIT4WK2z1W+CUHZj4Skq/eao9oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_94727117f7ebdce490b4698e582ae41e08a6795f053c2d35fbaf09c859724818

    • Size

      184KB

    • MD5

      ab1bb41d92bcf0212b818cc8289c1b25

    • SHA1

      f82dd73cde84447e521d4494ff355968bf9c7ad8

    • SHA256

      94727117f7ebdce490b4698e582ae41e08a6795f053c2d35fbaf09c859724818

    • SHA512

      f3d3c9c47b03b29095ed3e9cf72baabb31368457d6bfeb5d40e0c9e49d0340c6cd646bab09a9524f6ba94de0d53b536005314fccac107866861be4e09b4e33bd

    • SSDEEP

      3072:TiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoflzoxss7:TiLVCIT4WK2z1W+CUHZj4Skq/eao9oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks