General

  • Target

    JaffaCakes118_f5a26d420db44f8da92b0564a2c7ea5a94f00c23720747a5cb059d5b9711ac34

  • Size

    184KB

  • Sample

    241224-2nzkwazjc1

  • MD5

    430c82bac06bd287afcc1f81b17f3a30

  • SHA1

    80a16f23f5eb67a735a700309ae2e9536de2fa2e

  • SHA256

    f5a26d420db44f8da92b0564a2c7ea5a94f00c23720747a5cb059d5b9711ac34

  • SHA512

    42976c79f2b129f603ae760fdfee6b809755dea00a68853e156cc19cd56dd53f37476aaf586c9f585b9b4d3b4a2db4d7747cc4174a29339942d5e1874a377200

  • SSDEEP

    3072:BiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao1lzoxss7:BiLVCIT4WK2z1W+CUHZj4Skq/eaoboC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_f5a26d420db44f8da92b0564a2c7ea5a94f00c23720747a5cb059d5b9711ac34

    • Size

      184KB

    • MD5

      430c82bac06bd287afcc1f81b17f3a30

    • SHA1

      80a16f23f5eb67a735a700309ae2e9536de2fa2e

    • SHA256

      f5a26d420db44f8da92b0564a2c7ea5a94f00c23720747a5cb059d5b9711ac34

    • SHA512

      42976c79f2b129f603ae760fdfee6b809755dea00a68853e156cc19cd56dd53f37476aaf586c9f585b9b4d3b4a2db4d7747cc4174a29339942d5e1874a377200

    • SSDEEP

      3072:BiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao1lzoxss7:BiLVCIT4WK2z1W+CUHZj4Skq/eaoboC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks