General

  • Target

    JaffaCakes118_16753f419c8a630c89e77917a9be4b112a5de58bf10554ba3641aa0d67c9aad7

  • Size

    184KB

  • Sample

    241224-2thjjszkhw

  • MD5

    918fb9e563d3ca6fc578ec39eb12e8d6

  • SHA1

    d469c04e1c8418f686016c48a5a8328b8936fc74

  • SHA256

    16753f419c8a630c89e77917a9be4b112a5de58bf10554ba3641aa0d67c9aad7

  • SHA512

    a455dea9710ca8ac35dfc6b9179b93ebd23085ae42423ad6ce358bf04b22c32bde8271ef351488e3bc9e54b48b081cd3a7bcacfdb2e47c3115f73518f9d57b53

  • SSDEEP

    3072:eiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaozlzoxss7:eiLVCIT4WK2z1W+CUHZj4Skq/eaopoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_16753f419c8a630c89e77917a9be4b112a5de58bf10554ba3641aa0d67c9aad7

    • Size

      184KB

    • MD5

      918fb9e563d3ca6fc578ec39eb12e8d6

    • SHA1

      d469c04e1c8418f686016c48a5a8328b8936fc74

    • SHA256

      16753f419c8a630c89e77917a9be4b112a5de58bf10554ba3641aa0d67c9aad7

    • SHA512

      a455dea9710ca8ac35dfc6b9179b93ebd23085ae42423ad6ce358bf04b22c32bde8271ef351488e3bc9e54b48b081cd3a7bcacfdb2e47c3115f73518f9d57b53

    • SSDEEP

      3072:eiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaozlzoxss7:eiLVCIT4WK2z1W+CUHZj4Skq/eaopoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks