General

  • Target

    JaffaCakes118_01e0189faf3ab5f925cf353aa981fea7dab511ddec6febd210f433ebfcf344a6

  • Size

    184KB

  • Sample

    241223-xtzqlsyjbn

  • MD5

    2d37e0894c7eb0e473e44b224663dedd

  • SHA1

    cf8ee5612e32b1f92bb287890da50cc8050b4c16

  • SHA256

    01e0189faf3ab5f925cf353aa981fea7dab511ddec6febd210f433ebfcf344a6

  • SHA512

    64d39954cf7f11ac3936aa15e8278c2b5d00eb019c9cc4ae50c53b063f0d342e6a35861c00d9f810e87ee474d1b5a5573f97f5a07a721cd22dd13e11167a68a5

  • SSDEEP

    3072:ziLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao0lzoxss7:ziLVCIT4WK2z1W+CUHZj4Skq/eaoKoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_01e0189faf3ab5f925cf353aa981fea7dab511ddec6febd210f433ebfcf344a6

    • Size

      184KB

    • MD5

      2d37e0894c7eb0e473e44b224663dedd

    • SHA1

      cf8ee5612e32b1f92bb287890da50cc8050b4c16

    • SHA256

      01e0189faf3ab5f925cf353aa981fea7dab511ddec6febd210f433ebfcf344a6

    • SHA512

      64d39954cf7f11ac3936aa15e8278c2b5d00eb019c9cc4ae50c53b063f0d342e6a35861c00d9f810e87ee474d1b5a5573f97f5a07a721cd22dd13e11167a68a5

    • SSDEEP

      3072:ziLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao0lzoxss7:ziLVCIT4WK2z1W+CUHZj4Skq/eaoKoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks