General

  • Target

    JaffaCakes118_5ba92c21a24770ebe4d551c635dc9406389728d7d0ae45c9fc5b95d6831205e0

  • Size

    184KB

  • Sample

    241223-2547pavlcj

  • MD5

    5177a6e4825e8bbae1d858e7fa58c48d

  • SHA1

    d6c4f4fe9db4294b3016fc95b3580edcb0bebc3a

  • SHA256

    5ba92c21a24770ebe4d551c635dc9406389728d7d0ae45c9fc5b95d6831205e0

  • SHA512

    dae3be0fce0f74b8f0341345da90130414807bfac6dad0ddefdac36fc205253dff089ab06a8e2e95b120dc0e9a3337b338e9be6f49e4ed166f16dd8d3cbc2034

  • SSDEEP

    3072:YiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoqlzoxss7:YiLVCIT4WK2z1W+CUHZj4Skq/eaogoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_5ba92c21a24770ebe4d551c635dc9406389728d7d0ae45c9fc5b95d6831205e0

    • Size

      184KB

    • MD5

      5177a6e4825e8bbae1d858e7fa58c48d

    • SHA1

      d6c4f4fe9db4294b3016fc95b3580edcb0bebc3a

    • SHA256

      5ba92c21a24770ebe4d551c635dc9406389728d7d0ae45c9fc5b95d6831205e0

    • SHA512

      dae3be0fce0f74b8f0341345da90130414807bfac6dad0ddefdac36fc205253dff089ab06a8e2e95b120dc0e9a3337b338e9be6f49e4ed166f16dd8d3cbc2034

    • SSDEEP

      3072:YiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoqlzoxss7:YiLVCIT4WK2z1W+CUHZj4Skq/eaogoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks