General

  • Target

    JaffaCakes118_a5794364e3319ac218b65582909a5dc79ecc35a9701cc8042504281d5abd027a

  • Size

    184KB

  • Sample

    241223-x6qy8sylgt

  • MD5

    c0a244cc160ea8dfe53ea7e88780cb05

  • SHA1

    01cc0317dff2ff2a04e92bed5b32ca2b635f1418

  • SHA256

    a5794364e3319ac218b65582909a5dc79ecc35a9701cc8042504281d5abd027a

  • SHA512

    411f22c851086b0a0654a09ba35d18edde06ced1576c193b983de2aca4262e377b58329a8e9a6b28e2a29bc92093b5edabef7e04d98d73cd9f3fbbfc7c9e1dcc

  • SSDEEP

    3072:fiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaodlzoxss7:fiLVCIT4WK2z1W+CUHZj4Skq/eaozoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_a5794364e3319ac218b65582909a5dc79ecc35a9701cc8042504281d5abd027a

    • Size

      184KB

    • MD5

      c0a244cc160ea8dfe53ea7e88780cb05

    • SHA1

      01cc0317dff2ff2a04e92bed5b32ca2b635f1418

    • SHA256

      a5794364e3319ac218b65582909a5dc79ecc35a9701cc8042504281d5abd027a

    • SHA512

      411f22c851086b0a0654a09ba35d18edde06ced1576c193b983de2aca4262e377b58329a8e9a6b28e2a29bc92093b5edabef7e04d98d73cd9f3fbbfc7c9e1dcc

    • SSDEEP

      3072:fiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaodlzoxss7:fiLVCIT4WK2z1W+CUHZj4Skq/eaozoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks