General

  • Target

    JaffaCakes118_fbf9becd93b24b5777470863fa094556d58974ce063c65b521b183a47b6ecbf9

  • Size

    184KB

  • Sample

    241223-x832ksymgn

  • MD5

    2c9f5f037aeb582111cd0a9178178038

  • SHA1

    ec7652789f50bdf17f90e8a6aeffebbd5e081437

  • SHA256

    fbf9becd93b24b5777470863fa094556d58974ce063c65b521b183a47b6ecbf9

  • SHA512

    29dca5e1af0dec86d52ebf7dbfa004c6b6eb329478f095e2643e8f0b416c5ac365e22c35289c24042512f52b099168832d82978aa29daee7bef0b41fc03738a3

  • SSDEEP

    3072:ViLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoTlzoxss7:ViLVCIT4WK2z1W+CUHZj4Skq/eaoJoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_fbf9becd93b24b5777470863fa094556d58974ce063c65b521b183a47b6ecbf9

    • Size

      184KB

    • MD5

      2c9f5f037aeb582111cd0a9178178038

    • SHA1

      ec7652789f50bdf17f90e8a6aeffebbd5e081437

    • SHA256

      fbf9becd93b24b5777470863fa094556d58974ce063c65b521b183a47b6ecbf9

    • SHA512

      29dca5e1af0dec86d52ebf7dbfa004c6b6eb329478f095e2643e8f0b416c5ac365e22c35289c24042512f52b099168832d82978aa29daee7bef0b41fc03738a3

    • SSDEEP

      3072:ViLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoTlzoxss7:ViLVCIT4WK2z1W+CUHZj4Skq/eaoJoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks