General

  • Target

    JaffaCakes118_88b97237a1ee16d95b84411c6bb9eb607e34eeec4b0b62326faa27ec4e209417

  • Size

    184KB

  • Sample

    241223-yg89ysyran

  • MD5

    d120d62d8693519ed1f42c2729f8462d

  • SHA1

    c3cb547d48c751298bcf0bac9d9b0824b04f8537

  • SHA256

    88b97237a1ee16d95b84411c6bb9eb607e34eeec4b0b62326faa27ec4e209417

  • SHA512

    a212b586fc5edbc54cebfc38d21be182471b8a13ba572f485bf4a77b8b6e19218c1db919e174a667ba5a6340ec17ad8604680e5db8f9f9416e9383f4281dbe0f

  • SSDEEP

    3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoflzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eao9oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_88b97237a1ee16d95b84411c6bb9eb607e34eeec4b0b62326faa27ec4e209417

    • Size

      184KB

    • MD5

      d120d62d8693519ed1f42c2729f8462d

    • SHA1

      c3cb547d48c751298bcf0bac9d9b0824b04f8537

    • SHA256

      88b97237a1ee16d95b84411c6bb9eb607e34eeec4b0b62326faa27ec4e209417

    • SHA512

      a212b586fc5edbc54cebfc38d21be182471b8a13ba572f485bf4a77b8b6e19218c1db919e174a667ba5a6340ec17ad8604680e5db8f9f9416e9383f4281dbe0f

    • SSDEEP

      3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoflzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eao9oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks