General

  • Target

    JaffaCakes118_7309906f2268f74e2bf6b95e4e3e7aa00949ada1c6af7306df334bbc2fefb25a

  • Size

    184KB

  • Sample

    241223-zz3qka1nes

  • MD5

    3d2f56296070995661af166240994844

  • SHA1

    e12bae0e444f6812d8db5d4efd3f952029258bc0

  • SHA256

    7309906f2268f74e2bf6b95e4e3e7aa00949ada1c6af7306df334bbc2fefb25a

  • SHA512

    061862b2babf4c8663694fbc9144773bd74fd52cb817eaa3693f22cf8e77b8e1d1413e2b1e575552264d9dc6ce4e9413062b56285a4f03a07ed94be7c36a1d19

  • SSDEEP

    3072:fiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao4lzoxss7:fiLVCIT4WK2z1W+CUHZj4Skq/eaomoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_7309906f2268f74e2bf6b95e4e3e7aa00949ada1c6af7306df334bbc2fefb25a

    • Size

      184KB

    • MD5

      3d2f56296070995661af166240994844

    • SHA1

      e12bae0e444f6812d8db5d4efd3f952029258bc0

    • SHA256

      7309906f2268f74e2bf6b95e4e3e7aa00949ada1c6af7306df334bbc2fefb25a

    • SHA512

      061862b2babf4c8663694fbc9144773bd74fd52cb817eaa3693f22cf8e77b8e1d1413e2b1e575552264d9dc6ce4e9413062b56285a4f03a07ed94be7c36a1d19

    • SSDEEP

      3072:fiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao4lzoxss7:fiLVCIT4WK2z1W+CUHZj4Skq/eaomoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks