General

  • Target

    JaffaCakes118_0bea1e77a53ef4bcaf2892d1040c1a52a42e525e3b579cd69ab8c568246e09db

  • Size

    184KB

  • Sample

    241223-rp6epsskaq

  • MD5

    ddd34593ba864e726506d61266bd8582

  • SHA1

    5efef97a63d2de8c050425767800b269a70bad4a

  • SHA256

    0bea1e77a53ef4bcaf2892d1040c1a52a42e525e3b579cd69ab8c568246e09db

  • SHA512

    cbbace47d9bcc8f7d58133690e5d91a07bc5bd6ab14a7a23535c0ae71455da0f027d8e8e7111e3c7c39d7df45be8a3a95588894885cd23afed3b2d48ef09271b

  • SSDEEP

    3072:GiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaodlzoxss7:GiLVCIT4WK2z1W+CUHZj4Skq/eaozoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_0bea1e77a53ef4bcaf2892d1040c1a52a42e525e3b579cd69ab8c568246e09db

    • Size

      184KB

    • MD5

      ddd34593ba864e726506d61266bd8582

    • SHA1

      5efef97a63d2de8c050425767800b269a70bad4a

    • SHA256

      0bea1e77a53ef4bcaf2892d1040c1a52a42e525e3b579cd69ab8c568246e09db

    • SHA512

      cbbace47d9bcc8f7d58133690e5d91a07bc5bd6ab14a7a23535c0ae71455da0f027d8e8e7111e3c7c39d7df45be8a3a95588894885cd23afed3b2d48ef09271b

    • SSDEEP

      3072:GiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaodlzoxss7:GiLVCIT4WK2z1W+CUHZj4Skq/eaozoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks