General

  • Target

    JaffaCakes118_8960407168cea3a20a686162e53eeb94cd89a25683594a9feb432127d4ea91c4

  • Size

    184KB

  • Sample

    241223-w1kplaxkcw

  • MD5

    46a4f9bd5ad3746cdc6159b901cc2311

  • SHA1

    43b83f6295c9b703f5b5e26db742ff20a59d4aa4

  • SHA256

    8960407168cea3a20a686162e53eeb94cd89a25683594a9feb432127d4ea91c4

  • SHA512

    19c6cdb06682d7a5a05187a4e912ba281ed75bf8a29eb3c934e683e97c7b106035d7fbc75b8c4cd46a18feb9ed5cff1e606bd6cc21cef006c44aa087cedfb98f

  • SSDEEP

    3072:TiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaollzoxss7:TiLVCIT4WK2z1W+CUHZj4Skq/eaoroC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_8960407168cea3a20a686162e53eeb94cd89a25683594a9feb432127d4ea91c4

    • Size

      184KB

    • MD5

      46a4f9bd5ad3746cdc6159b901cc2311

    • SHA1

      43b83f6295c9b703f5b5e26db742ff20a59d4aa4

    • SHA256

      8960407168cea3a20a686162e53eeb94cd89a25683594a9feb432127d4ea91c4

    • SHA512

      19c6cdb06682d7a5a05187a4e912ba281ed75bf8a29eb3c934e683e97c7b106035d7fbc75b8c4cd46a18feb9ed5cff1e606bd6cc21cef006c44aa087cedfb98f

    • SSDEEP

      3072:TiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaollzoxss7:TiLVCIT4WK2z1W+CUHZj4Skq/eaoroC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks