General

  • Target

    JaffaCakes118_988f3766b231834bb831532f43c806c3702b6b4f322f09ba12bd431e71727723

  • Size

    184KB

  • Sample

    241223-qe95gazqaw

  • MD5

    47f74fb6fdeaa6b8c61e87a0ff375b82

  • SHA1

    5b6283e27d2c1e900816c453ed7a4e603dd7fd91

  • SHA256

    988f3766b231834bb831532f43c806c3702b6b4f322f09ba12bd431e71727723

  • SHA512

    bee062df127687413d5bcdd408b4fe21b762a36246c4c33cd634e79a7bc29b0cf3042866bce1688ac56c42fd129e33adce530ab0abc6e53b2a9bf80eec9bf700

  • SSDEEP

    3072:EiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaowlzoxss7:EiLVCIT4WK2z1W+CUHZj4Skq/eaoOoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_988f3766b231834bb831532f43c806c3702b6b4f322f09ba12bd431e71727723

    • Size

      184KB

    • MD5

      47f74fb6fdeaa6b8c61e87a0ff375b82

    • SHA1

      5b6283e27d2c1e900816c453ed7a4e603dd7fd91

    • SHA256

      988f3766b231834bb831532f43c806c3702b6b4f322f09ba12bd431e71727723

    • SHA512

      bee062df127687413d5bcdd408b4fe21b762a36246c4c33cd634e79a7bc29b0cf3042866bce1688ac56c42fd129e33adce530ab0abc6e53b2a9bf80eec9bf700

    • SSDEEP

      3072:EiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaowlzoxss7:EiLVCIT4WK2z1W+CUHZj4Skq/eaoOoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks