General

  • Target

    JaffaCakes118_14104d2420dcebe85fa3713df92373934cf1f4bd786e6823d56077efa0ade108

  • Size

    184KB

  • Sample

    241224-cs5j9azjdm

  • MD5

    99f7faae8fa41d8ceeb92a553c573178

  • SHA1

    3c7da648052a39b8fb5c224d4f5cbb127805b659

  • SHA256

    14104d2420dcebe85fa3713df92373934cf1f4bd786e6823d56077efa0ade108

  • SHA512

    11d686718e6eee5929c1cc05bd30f59b70717c34e4c39865675d84fd22472d9948b824e49ab81076e75610b2cb10326ef99a69a3c9c259d39e7ae30f50aee12f

  • SSDEEP

    3072:41JzSxp5PpRh7phfrv/6jC5KHWnzD7xC3/o1WXDCFUBUL1iMhmDEwmuFWwOF:41JGz5pX7fz+C5kUzDA36bFUc1i7EwRy

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_14104d2420dcebe85fa3713df92373934cf1f4bd786e6823d56077efa0ade108

    • Size

      184KB

    • MD5

      99f7faae8fa41d8ceeb92a553c573178

    • SHA1

      3c7da648052a39b8fb5c224d4f5cbb127805b659

    • SHA256

      14104d2420dcebe85fa3713df92373934cf1f4bd786e6823d56077efa0ade108

    • SHA512

      11d686718e6eee5929c1cc05bd30f59b70717c34e4c39865675d84fd22472d9948b824e49ab81076e75610b2cb10326ef99a69a3c9c259d39e7ae30f50aee12f

    • SSDEEP

      3072:41JzSxp5PpRh7phfrv/6jC5KHWnzD7xC3/o1WXDCFUBUL1iMhmDEwmuFWwOF:41JGz5pX7fz+C5kUzDA36bFUc1i7EwRy

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks