General

  • Target

    JaffaCakes118_96ed3896194304a0bba1bf4632c1846cab4641a983f66dc2c16cf1f40f06f561

  • Size

    184KB

  • Sample

    241222-qc774ayqes

  • MD5

    b1244a629a7963f184dd1ce5f7f9294e

  • SHA1

    19cce8abde6a15847ceab0e8a6c32702dad7e5a1

  • SHA256

    96ed3896194304a0bba1bf4632c1846cab4641a983f66dc2c16cf1f40f06f561

  • SHA512

    655dd4b0beb1df53e18a7723de9ee21604cd5fcffb95d75ff1b73cee49e7bdd8faffe5f92e078d260643f1c2be47191d8162db7f19963d403cc65625ddfca0e0

  • SSDEEP

    3072:OiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaomlzoxss7:OiLVCIT4WK2z1W+CUHZj4Skq/eao0oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_96ed3896194304a0bba1bf4632c1846cab4641a983f66dc2c16cf1f40f06f561

    • Size

      184KB

    • MD5

      b1244a629a7963f184dd1ce5f7f9294e

    • SHA1

      19cce8abde6a15847ceab0e8a6c32702dad7e5a1

    • SHA256

      96ed3896194304a0bba1bf4632c1846cab4641a983f66dc2c16cf1f40f06f561

    • SHA512

      655dd4b0beb1df53e18a7723de9ee21604cd5fcffb95d75ff1b73cee49e7bdd8faffe5f92e078d260643f1c2be47191d8162db7f19963d403cc65625ddfca0e0

    • SSDEEP

      3072:OiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaomlzoxss7:OiLVCIT4WK2z1W+CUHZj4Skq/eao0oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks