General

  • Target

    JaffaCakes118_44008814cd32b11b3ee8827d2cabe947d423f88d20eaf840ffc653bd52615182

  • Size

    184KB

  • Sample

    241223-2sp71atpbz

  • MD5

    2405ae8664637572179b79d8e0e61247

  • SHA1

    721e8454cc60a2fbe04f9847dd17798d17cdd418

  • SHA256

    44008814cd32b11b3ee8827d2cabe947d423f88d20eaf840ffc653bd52615182

  • SHA512

    cbda5dea74ebcef9aaf0cf318df334d7d6b30762dc95f426801eca1f9de9b38f7a5467a46350cd365305f69816c24ea48e4032cdd1c4a6b5d4cc456c9b258440

  • SSDEEP

    3072:ZiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoblzoxss7:ZiLVCIT4WK2z1W+CUHZj4Skq/eaohoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_44008814cd32b11b3ee8827d2cabe947d423f88d20eaf840ffc653bd52615182

    • Size

      184KB

    • MD5

      2405ae8664637572179b79d8e0e61247

    • SHA1

      721e8454cc60a2fbe04f9847dd17798d17cdd418

    • SHA256

      44008814cd32b11b3ee8827d2cabe947d423f88d20eaf840ffc653bd52615182

    • SHA512

      cbda5dea74ebcef9aaf0cf318df334d7d6b30762dc95f426801eca1f9de9b38f7a5467a46350cd365305f69816c24ea48e4032cdd1c4a6b5d4cc456c9b258440

    • SSDEEP

      3072:ZiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoblzoxss7:ZiLVCIT4WK2z1W+CUHZj4Skq/eaohoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks