General

  • Target

    JaffaCakes118_518d5bb68345701d7546ef3f46f09f86607f1681d7d428678d30e1dde70dfd5f

  • Size

    184KB

  • Sample

    241223-wvg2hsxjcv

  • MD5

    b5a9a6a2849a43673042f63d1645eabc

  • SHA1

    1e02f39b744599f621db0cf0e3d30935eb4416c0

  • SHA256

    518d5bb68345701d7546ef3f46f09f86607f1681d7d428678d30e1dde70dfd5f

  • SHA512

    7e0bef16849319a98aaeef2671d6bd720d226a580601d036e34d680000e817d619dfa1ec80fcf1287794cb69fe1f4c12142bc312a0cf2a95d2a462e211d94c80

  • SSDEEP

    3072:OJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JZa//2uFrSc:3fYOX+wTScR/Xzku9LVwyuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_518d5bb68345701d7546ef3f46f09f86607f1681d7d428678d30e1dde70dfd5f

    • Size

      184KB

    • MD5

      b5a9a6a2849a43673042f63d1645eabc

    • SHA1

      1e02f39b744599f621db0cf0e3d30935eb4416c0

    • SHA256

      518d5bb68345701d7546ef3f46f09f86607f1681d7d428678d30e1dde70dfd5f

    • SHA512

      7e0bef16849319a98aaeef2671d6bd720d226a580601d036e34d680000e817d619dfa1ec80fcf1287794cb69fe1f4c12142bc312a0cf2a95d2a462e211d94c80

    • SSDEEP

      3072:OJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JZa//2uFrSc:3fYOX+wTScR/Xzku9LVwyuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks