General

  • Target

    JaffaCakes118_eba4c72c1ab8a9005bb74975a70126290d7060ba1c2f042eb249f6c31da1a567

  • Size

    184KB

  • Sample

    241223-rxraraslfm

  • MD5

    3f43568587ce21b75db85d00e2eeeded

  • SHA1

    70368ebce4911ea3e99c401c2c208fd67b6df4e1

  • SHA256

    eba4c72c1ab8a9005bb74975a70126290d7060ba1c2f042eb249f6c31da1a567

  • SHA512

    074a1406333f6d35872b2c7803bf59116f18b745d59cd91123d16ac0ad2cbdba82de43afda1a40ef0ca2bfa8775b1e04e497b0900e24d4cbebf70c3b07afe1e4

  • SSDEEP

    3072:HiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaojlzoxss7:HiLVCIT4WK2z1W+CUHZj4Skq/eao5oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_eba4c72c1ab8a9005bb74975a70126290d7060ba1c2f042eb249f6c31da1a567

    • Size

      184KB

    • MD5

      3f43568587ce21b75db85d00e2eeeded

    • SHA1

      70368ebce4911ea3e99c401c2c208fd67b6df4e1

    • SHA256

      eba4c72c1ab8a9005bb74975a70126290d7060ba1c2f042eb249f6c31da1a567

    • SHA512

      074a1406333f6d35872b2c7803bf59116f18b745d59cd91123d16ac0ad2cbdba82de43afda1a40ef0ca2bfa8775b1e04e497b0900e24d4cbebf70c3b07afe1e4

    • SSDEEP

      3072:HiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaojlzoxss7:HiLVCIT4WK2z1W+CUHZj4Skq/eao5oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks