General

  • Target

    JaffaCakes118_e26cefdf2ab5adb81792ab485335ac0fd63455e5d4a366c99914c5c8e52d1986

  • Size

    184KB

  • Sample

    241223-wct85awnfv

  • MD5

    16875fc2cd05cf66d00d0e76584f7f1f

  • SHA1

    3ce9571bff4f46a6d733f6029dc0de5251713e9b

  • SHA256

    e26cefdf2ab5adb81792ab485335ac0fd63455e5d4a366c99914c5c8e52d1986

  • SHA512

    1b4fc079cc89c9945d4509d0aa48908f12f3911a7db55210990f52ab50b818b948287f951450924a5c04c22d1ec1616aa8871a76c09ab008827bfd64233867c7

  • SSDEEP

    3072:1iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoHlzoxss7:1iLVCIT4WK2z1W+CUHZj4Skq/eao1oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_e26cefdf2ab5adb81792ab485335ac0fd63455e5d4a366c99914c5c8e52d1986

    • Size

      184KB

    • MD5

      16875fc2cd05cf66d00d0e76584f7f1f

    • SHA1

      3ce9571bff4f46a6d733f6029dc0de5251713e9b

    • SHA256

      e26cefdf2ab5adb81792ab485335ac0fd63455e5d4a366c99914c5c8e52d1986

    • SHA512

      1b4fc079cc89c9945d4509d0aa48908f12f3911a7db55210990f52ab50b818b948287f951450924a5c04c22d1ec1616aa8871a76c09ab008827bfd64233867c7

    • SSDEEP

      3072:1iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoHlzoxss7:1iLVCIT4WK2z1W+CUHZj4Skq/eao1oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks