General

  • Target

    JaffaCakes118_a8def52457ed0393ce66c1defd143ab2bfb2c700eb18781cb8569405d6e52bdb

  • Size

    184KB

  • Sample

    241224-ds52fszrez

  • MD5

    9117716161bcf49fda5df628ca1b473c

  • SHA1

    19779d13bd311f41669daa6c349f864e25166c41

  • SHA256

    a8def52457ed0393ce66c1defd143ab2bfb2c700eb18781cb8569405d6e52bdb

  • SHA512

    0250daee08addc64cff84472ff3de3ba886d6eb97221772ed31aca876503d23533ad1c6b6e8c58ac58b2b82b442664ddf18f973b24d11da42a502e68d02c9396

  • SSDEEP

    3072:dJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jra//2uFrSc:mfYOX+wTScR/Xzku9LVwguG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_a8def52457ed0393ce66c1defd143ab2bfb2c700eb18781cb8569405d6e52bdb

    • Size

      184KB

    • MD5

      9117716161bcf49fda5df628ca1b473c

    • SHA1

      19779d13bd311f41669daa6c349f864e25166c41

    • SHA256

      a8def52457ed0393ce66c1defd143ab2bfb2c700eb18781cb8569405d6e52bdb

    • SHA512

      0250daee08addc64cff84472ff3de3ba886d6eb97221772ed31aca876503d23533ad1c6b6e8c58ac58b2b82b442664ddf18f973b24d11da42a502e68d02c9396

    • SSDEEP

      3072:dJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jra//2uFrSc:mfYOX+wTScR/Xzku9LVwguG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks