General

  • Target

    JaffaCakes118_25dd921bb4cc5e12cce11e0a188efa6dd103d079a1e91ee82e1c469d6618f9ae

  • Size

    184KB

  • Sample

    241223-14vfessrf1

  • MD5

    86b4d65933ebe2a1ba36e6d877a8d64d

  • SHA1

    d859be61c7c7f7b6d69c16b2913841654cd90227

  • SHA256

    25dd921bb4cc5e12cce11e0a188efa6dd103d079a1e91ee82e1c469d6618f9ae

  • SHA512

    63c0d9b091a3cd677d615cd5a2eef6e412ce0a92d74a29ca0b798a4978c6867fb75f07a0fc71f3fb1c42abe3a2985b1ff855032371b741454170f746efbffe90

  • SSDEEP

    3072:dJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8J5a//2uFrSc:mfYOX+wTScR/Xzku9LVwSuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_25dd921bb4cc5e12cce11e0a188efa6dd103d079a1e91ee82e1c469d6618f9ae

    • Size

      184KB

    • MD5

      86b4d65933ebe2a1ba36e6d877a8d64d

    • SHA1

      d859be61c7c7f7b6d69c16b2913841654cd90227

    • SHA256

      25dd921bb4cc5e12cce11e0a188efa6dd103d079a1e91ee82e1c469d6618f9ae

    • SHA512

      63c0d9b091a3cd677d615cd5a2eef6e412ce0a92d74a29ca0b798a4978c6867fb75f07a0fc71f3fb1c42abe3a2985b1ff855032371b741454170f746efbffe90

    • SSDEEP

      3072:dJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8J5a//2uFrSc:mfYOX+wTScR/Xzku9LVwSuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks