General

  • Target

    JaffaCakes118_ce8c7cd1fee584782a0d9f5a21fb3a4addd4d975ce3a5e9571dd4fc004e4990e

  • Size

    184KB

  • Sample

    241223-y6agxszpdp

  • MD5

    31b6e45cac6e0967d661989001211330

  • SHA1

    5da0b1b5c35a0f3cf6387a9ee263b90d8949d4c4

  • SHA256

    ce8c7cd1fee584782a0d9f5a21fb3a4addd4d975ce3a5e9571dd4fc004e4990e

  • SHA512

    71799d3166ab702db0c31701423d5f0dc94322f960534c88da8cb4ef764211c73232d3d3997c384246cc22809d48182b45201e0db86c56395f7db4bf2736bbcd

  • SSDEEP

    3072:QiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoHlzoxss7:QiLVCIT4WK2z1W+CUHZj4Skq/eao1oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_ce8c7cd1fee584782a0d9f5a21fb3a4addd4d975ce3a5e9571dd4fc004e4990e

    • Size

      184KB

    • MD5

      31b6e45cac6e0967d661989001211330

    • SHA1

      5da0b1b5c35a0f3cf6387a9ee263b90d8949d4c4

    • SHA256

      ce8c7cd1fee584782a0d9f5a21fb3a4addd4d975ce3a5e9571dd4fc004e4990e

    • SHA512

      71799d3166ab702db0c31701423d5f0dc94322f960534c88da8cb4ef764211c73232d3d3997c384246cc22809d48182b45201e0db86c56395f7db4bf2736bbcd

    • SSDEEP

      3072:QiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoHlzoxss7:QiLVCIT4WK2z1W+CUHZj4Skq/eao1oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks