General

  • Target

    JaffaCakes118_035d1216214daae1ead57fbe4e5970eaf6d7c26887c7f94a485217543f3d475b

  • Size

    184KB

  • Sample

    241224-1a6llaxrdn

  • MD5

    d7c6535b9751dbc04f034cd67d3eb932

  • SHA1

    13b9ecb805190d11034528011088a00de6205aa8

  • SHA256

    035d1216214daae1ead57fbe4e5970eaf6d7c26887c7f94a485217543f3d475b

  • SHA512

    3819fc30c01ac04857ef83e96399c6fbff213f2c51a6233a4ce4af8b1bc030810612e7d1ebb961cc321b6a4038b7fa173df7c9281c99360d6347d949eee81938

  • SSDEEP

    3072:XiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoBlzoxss7:XiLVCIT4WK2z1W+CUHZj4Skq/eaofoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_035d1216214daae1ead57fbe4e5970eaf6d7c26887c7f94a485217543f3d475b

    • Size

      184KB

    • MD5

      d7c6535b9751dbc04f034cd67d3eb932

    • SHA1

      13b9ecb805190d11034528011088a00de6205aa8

    • SHA256

      035d1216214daae1ead57fbe4e5970eaf6d7c26887c7f94a485217543f3d475b

    • SHA512

      3819fc30c01ac04857ef83e96399c6fbff213f2c51a6233a4ce4af8b1bc030810612e7d1ebb961cc321b6a4038b7fa173df7c9281c99360d6347d949eee81938

    • SSDEEP

      3072:XiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoBlzoxss7:XiLVCIT4WK2z1W+CUHZj4Skq/eaofoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks