General

  • Target

    JaffaCakes118_ade042c3638541185ab8c052c76ee36d08fbdb72ce422d3d129bcc5aa521e62b

  • Size

    184KB

  • Sample

    241223-2nb5kstnat

  • MD5

    8446ce9f06247bccd0507542ff36aaa6

  • SHA1

    8a84e34b0c38d069ef2ed22679aa0186635ef80a

  • SHA256

    ade042c3638541185ab8c052c76ee36d08fbdb72ce422d3d129bcc5aa521e62b

  • SHA512

    3aa6d410ce2faa317f5bed471dddb1306052b1830bd14613acaa75dc9d94486fdc7c4ce355a045885eedaead81e96343658811f3e830e1b9267c1b75655b9379

  • SSDEEP

    3072:1iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoElzoxss7:1iLVCIT4WK2z1W+CUHZj4Skq/eao6oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_ade042c3638541185ab8c052c76ee36d08fbdb72ce422d3d129bcc5aa521e62b

    • Size

      184KB

    • MD5

      8446ce9f06247bccd0507542ff36aaa6

    • SHA1

      8a84e34b0c38d069ef2ed22679aa0186635ef80a

    • SHA256

      ade042c3638541185ab8c052c76ee36d08fbdb72ce422d3d129bcc5aa521e62b

    • SHA512

      3aa6d410ce2faa317f5bed471dddb1306052b1830bd14613acaa75dc9d94486fdc7c4ce355a045885eedaead81e96343658811f3e830e1b9267c1b75655b9379

    • SSDEEP

      3072:1iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoElzoxss7:1iLVCIT4WK2z1W+CUHZj4Skq/eao6oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks