General

  • Target

    JaffaCakes118_084b9228e828fb61d8d11dac2d37a0ab13adde73b5d1fe7280131587a7275f30

  • Size

    184KB

  • Sample

    241223-s1g2xstlaw

  • MD5

    b5a9d12b08521fc25dad068988cdda82

  • SHA1

    c53616ff8314cb2b9681d02bb70b90d6fc622573

  • SHA256

    084b9228e828fb61d8d11dac2d37a0ab13adde73b5d1fe7280131587a7275f30

  • SHA512

    43d005fda4abb47c2f80323216a4e8c97bdfe886b890f65865ea93872e20e05c93343573dd349ae9dd4ad56037f278a3b50c09ada1a16df6cca3cc46ac4b4c5e

  • SSDEEP

    3072:LiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoUlzoxss7:LiLVCIT4WK2z1W+CUHZj4Skq/eaoqoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_084b9228e828fb61d8d11dac2d37a0ab13adde73b5d1fe7280131587a7275f30

    • Size

      184KB

    • MD5

      b5a9d12b08521fc25dad068988cdda82

    • SHA1

      c53616ff8314cb2b9681d02bb70b90d6fc622573

    • SHA256

      084b9228e828fb61d8d11dac2d37a0ab13adde73b5d1fe7280131587a7275f30

    • SHA512

      43d005fda4abb47c2f80323216a4e8c97bdfe886b890f65865ea93872e20e05c93343573dd349ae9dd4ad56037f278a3b50c09ada1a16df6cca3cc46ac4b4c5e

    • SSDEEP

      3072:LiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoUlzoxss7:LiLVCIT4WK2z1W+CUHZj4Skq/eaoqoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks