General

  • Target

    JaffaCakes118_6bd388400395e6057f929c6b07b2e179d203342d1070de8a77abf4239b0495e2

  • Size

    184KB

  • Sample

    241223-rdqvwa1qay

  • MD5

    c128ebafb13f99ac944aba3c931d41e2

  • SHA1

    ad6df657d5232c9d8b0036c0549059fb39700d4b

  • SHA256

    6bd388400395e6057f929c6b07b2e179d203342d1070de8a77abf4239b0495e2

  • SHA512

    d7ffe0d601f61eed87cf236c28d750129616ecd3bb3bbdcbf53afc02a3392efca66b7ae943a82346ad2acb6b22d03cd57aff44eb7d11ca7cb373f647364cf6b9

  • SSDEEP

    3072:kiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoslzoxss7:kiLVCIT4WK2z1W+CUHZj4Skq/eaoSoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_6bd388400395e6057f929c6b07b2e179d203342d1070de8a77abf4239b0495e2

    • Size

      184KB

    • MD5

      c128ebafb13f99ac944aba3c931d41e2

    • SHA1

      ad6df657d5232c9d8b0036c0549059fb39700d4b

    • SHA256

      6bd388400395e6057f929c6b07b2e179d203342d1070de8a77abf4239b0495e2

    • SHA512

      d7ffe0d601f61eed87cf236c28d750129616ecd3bb3bbdcbf53afc02a3392efca66b7ae943a82346ad2acb6b22d03cd57aff44eb7d11ca7cb373f647364cf6b9

    • SSDEEP

      3072:kiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoslzoxss7:kiLVCIT4WK2z1W+CUHZj4Skq/eaoSoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks