General

  • Target

    JaffaCakes118_28c2fe57250c7384956185d287af6f69f99c5162ddd010db47f28021d94d68fe

  • Size

    184KB

  • Sample

    241224-k73cfatlhv

  • MD5

    ab2e2d1acfad8b76125bdf702bb612ae

  • SHA1

    2bbefd03f8403c1f31e1515bf900ab81db870501

  • SHA256

    28c2fe57250c7384956185d287af6f69f99c5162ddd010db47f28021d94d68fe

  • SHA512

    fece9143c5d4c657021cc60f9fa2dad0d15ca5435ccb61ebefb4c2bfeedea48a91eedc2ccdb24a578d3dce38e676217ad82bfd9887dbd05c892a6737a80206cf

  • SSDEEP

    3072:DJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jua//2uFrSc:ofYOX+wTScR/Xzku9LVwluG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_28c2fe57250c7384956185d287af6f69f99c5162ddd010db47f28021d94d68fe

    • Size

      184KB

    • MD5

      ab2e2d1acfad8b76125bdf702bb612ae

    • SHA1

      2bbefd03f8403c1f31e1515bf900ab81db870501

    • SHA256

      28c2fe57250c7384956185d287af6f69f99c5162ddd010db47f28021d94d68fe

    • SHA512

      fece9143c5d4c657021cc60f9fa2dad0d15ca5435ccb61ebefb4c2bfeedea48a91eedc2ccdb24a578d3dce38e676217ad82bfd9887dbd05c892a6737a80206cf

    • SSDEEP

      3072:DJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jua//2uFrSc:ofYOX+wTScR/Xzku9LVwluG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks