General

  • Target

    JaffaCakes118_1abefda1cf32a6a2ad7db25ae40097681777f60183d1b7c524d1b32288ec2833

  • Size

    184KB

  • Sample

    241224-dwkvpa1lek

  • MD5

    df753ad38374d78a22e4e9bb145074dc

  • SHA1

    054ce95b44a5eb6d3a4fc29e0afc9e5d2bedc827

  • SHA256

    1abefda1cf32a6a2ad7db25ae40097681777f60183d1b7c524d1b32288ec2833

  • SHA512

    1661e5d1dfefc12c7ebb541d0d5092320f94715f5c0e8da02beb2885b3007d4f818f7c9ee77eba95d8235cd1e2e275f545da6c11abdb1aedcd8982983da55c3b

  • SSDEEP

    3072:giLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoIlzoxss7:giLVCIT4WK2z1W+CUHZj4Skq/eaoWoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_1abefda1cf32a6a2ad7db25ae40097681777f60183d1b7c524d1b32288ec2833

    • Size

      184KB

    • MD5

      df753ad38374d78a22e4e9bb145074dc

    • SHA1

      054ce95b44a5eb6d3a4fc29e0afc9e5d2bedc827

    • SHA256

      1abefda1cf32a6a2ad7db25ae40097681777f60183d1b7c524d1b32288ec2833

    • SHA512

      1661e5d1dfefc12c7ebb541d0d5092320f94715f5c0e8da02beb2885b3007d4f818f7c9ee77eba95d8235cd1e2e275f545da6c11abdb1aedcd8982983da55c3b

    • SSDEEP

      3072:giLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoIlzoxss7:giLVCIT4WK2z1W+CUHZj4Skq/eaoWoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks