General

  • Target

    JaffaCakes118_90323c54f10b722b74039e517c70d1b37c3916ea9b60071232b2b6ecb57a73a8

  • Size

    184KB

  • Sample

    241223-zyhzrs1pbr

  • MD5

    70b6647bd3506fd2d588a623723977a1

  • SHA1

    f263a7182f02f323221256e120a4dd185359a185

  • SHA256

    90323c54f10b722b74039e517c70d1b37c3916ea9b60071232b2b6ecb57a73a8

  • SHA512

    8be866333da04b214983a5de3843d805fe1655a0f6002efa552197cb00a7891257f202b27da592df43eb65281b2f34d25fa038efce989c04e2bd7d6645255711

  • SSDEEP

    3072:XiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoWlzoxss7:XiLVCIT4WK2z1W+CUHZj4Skq/eaoEoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_90323c54f10b722b74039e517c70d1b37c3916ea9b60071232b2b6ecb57a73a8

    • Size

      184KB

    • MD5

      70b6647bd3506fd2d588a623723977a1

    • SHA1

      f263a7182f02f323221256e120a4dd185359a185

    • SHA256

      90323c54f10b722b74039e517c70d1b37c3916ea9b60071232b2b6ecb57a73a8

    • SHA512

      8be866333da04b214983a5de3843d805fe1655a0f6002efa552197cb00a7891257f202b27da592df43eb65281b2f34d25fa038efce989c04e2bd7d6645255711

    • SSDEEP

      3072:XiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoWlzoxss7:XiLVCIT4WK2z1W+CUHZj4Skq/eaoEoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks