General

  • Target

    JaffaCakes118_e0c59241f318a92e78d7928a84325dfd83973b3f61f0439d64e8dc153d3e3d53

  • Size

    184KB

  • Sample

    241222-x9cwsawqay

  • MD5

    fed8b57c6d4c9001a83f05be3d34d782

  • SHA1

    0461d8dbcd4613a93c37809065afc66bd9ea3eac

  • SHA256

    e0c59241f318a92e78d7928a84325dfd83973b3f61f0439d64e8dc153d3e3d53

  • SHA512

    d7f2c04e4879d4e296a7b367139db1955df0b7dc217234953879275b619fb681be70ca9c575f20a3caa881733f97a5b20bebb3c2808742ad790457ffc6912eec

  • SSDEEP

    3072:LiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaorlzoxss7:LiLVCIT4WK2z1W+CUHZj4Skq/eaoRoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_e0c59241f318a92e78d7928a84325dfd83973b3f61f0439d64e8dc153d3e3d53

    • Size

      184KB

    • MD5

      fed8b57c6d4c9001a83f05be3d34d782

    • SHA1

      0461d8dbcd4613a93c37809065afc66bd9ea3eac

    • SHA256

      e0c59241f318a92e78d7928a84325dfd83973b3f61f0439d64e8dc153d3e3d53

    • SHA512

      d7f2c04e4879d4e296a7b367139db1955df0b7dc217234953879275b619fb681be70ca9c575f20a3caa881733f97a5b20bebb3c2808742ad790457ffc6912eec

    • SSDEEP

      3072:LiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaorlzoxss7:LiLVCIT4WK2z1W+CUHZj4Skq/eaoRoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks