General

  • Target

    JaffaCakes118_0ea895a22316c9004ede814794472e8b57435bb8be7041d3ab7d744139ab69ac

  • Size

    184KB

  • Sample

    241223-y191laznek

  • MD5

    8c512a01d018f9fa2356f188ba537cb9

  • SHA1

    9290dd68442ee8db32110c196b89d0f0be3980ad

  • SHA256

    0ea895a22316c9004ede814794472e8b57435bb8be7041d3ab7d744139ab69ac

  • SHA512

    079621c64b744b52b04114ded968c16e2637f11b43ed3d789f84418d37a1f100ac2c61a76eb5f3219e411cb39e455fc9f425437d9cd5708d28ba307f91939296

  • SSDEEP

    3072:fJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8J1a//2uFrSc:MfYOX+wTScR/Xzku9LVwGuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_0ea895a22316c9004ede814794472e8b57435bb8be7041d3ab7d744139ab69ac

    • Size

      184KB

    • MD5

      8c512a01d018f9fa2356f188ba537cb9

    • SHA1

      9290dd68442ee8db32110c196b89d0f0be3980ad

    • SHA256

      0ea895a22316c9004ede814794472e8b57435bb8be7041d3ab7d744139ab69ac

    • SHA512

      079621c64b744b52b04114ded968c16e2637f11b43ed3d789f84418d37a1f100ac2c61a76eb5f3219e411cb39e455fc9f425437d9cd5708d28ba307f91939296

    • SSDEEP

      3072:fJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8J1a//2uFrSc:MfYOX+wTScR/Xzku9LVwGuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks