General

  • Target

    JaffaCakes118_0f95f4e5d71c77b8410c6eb58bc5870e0fc0f9fdcb82312b519d86f2d4cf794c

  • Size

    184KB

  • Sample

    241223-xg52vsxpcl

  • MD5

    3e8e8e145fd927e911999ac6828f1a2c

  • SHA1

    f2785e7c9cdb402563f7e237b5ecbf3b81359108

  • SHA256

    0f95f4e5d71c77b8410c6eb58bc5870e0fc0f9fdcb82312b519d86f2d4cf794c

  • SHA512

    5d5b6df681584d3fd00fe4de29075e102fb16d2a9b324e73e6345ce78d5002a3bb8013899591f37687545eadf85afe6c8c8ae6635e4c944b775318115a6189cb

  • SSDEEP

    3072:3JQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JMa//2uFrSc:EfYOX+wTScR/Xzku9LVwXuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_0f95f4e5d71c77b8410c6eb58bc5870e0fc0f9fdcb82312b519d86f2d4cf794c

    • Size

      184KB

    • MD5

      3e8e8e145fd927e911999ac6828f1a2c

    • SHA1

      f2785e7c9cdb402563f7e237b5ecbf3b81359108

    • SHA256

      0f95f4e5d71c77b8410c6eb58bc5870e0fc0f9fdcb82312b519d86f2d4cf794c

    • SHA512

      5d5b6df681584d3fd00fe4de29075e102fb16d2a9b324e73e6345ce78d5002a3bb8013899591f37687545eadf85afe6c8c8ae6635e4c944b775318115a6189cb

    • SSDEEP

      3072:3JQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JMa//2uFrSc:EfYOX+wTScR/Xzku9LVwXuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks