General

  • Target

    JaffaCakes118_c723379e1108bafd54dc1ee2a357d69b9f3e4a6ba639e46f860564e4378333d2

  • Size

    184KB

  • Sample

    241223-2q313stran

  • MD5

    3dbfb8bf637cdb53b2ac5674304bf609

  • SHA1

    a4089e48816476d94a3ed38acaafeee9c8ce9bbc

  • SHA256

    c723379e1108bafd54dc1ee2a357d69b9f3e4a6ba639e46f860564e4378333d2

  • SHA512

    f05f0c409ffd397abacc8a9f609ad319812d2f301dea33b9b465ff0072e3492e6c2a27baed6a4b99ad201ccbdec34ba26f988f4f1999047b697e729530244f97

  • SSDEEP

    3072:JiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoMlzoxss7:JiLVCIT4WK2z1W+CUHZj4Skq/eaoyoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_c723379e1108bafd54dc1ee2a357d69b9f3e4a6ba639e46f860564e4378333d2

    • Size

      184KB

    • MD5

      3dbfb8bf637cdb53b2ac5674304bf609

    • SHA1

      a4089e48816476d94a3ed38acaafeee9c8ce9bbc

    • SHA256

      c723379e1108bafd54dc1ee2a357d69b9f3e4a6ba639e46f860564e4378333d2

    • SHA512

      f05f0c409ffd397abacc8a9f609ad319812d2f301dea33b9b465ff0072e3492e6c2a27baed6a4b99ad201ccbdec34ba26f988f4f1999047b697e729530244f97

    • SSDEEP

      3072:JiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoMlzoxss7:JiLVCIT4WK2z1W+CUHZj4Skq/eaoyoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks