General

  • Target

    JaffaCakes118_c9c3f3979b1b53ae01df78874721490e46b0ecafc00984deda03669749710bd6

  • Size

    184KB

  • Sample

    241224-l5172avlhk

  • MD5

    7e8e33cd92ddb0256ee5a5ae329875d6

  • SHA1

    9eb3e0530ac352b969e1a0fcd8beea6eedc45714

  • SHA256

    c9c3f3979b1b53ae01df78874721490e46b0ecafc00984deda03669749710bd6

  • SHA512

    22a114f63ad17e02afabc7c3fd8a3b49f325d6eb323b0729987c5e44205b8b6dfb023bebd02324b7bec7f5aaca7d5ef9c53a36009e7bef7456f70009465e615b

  • SSDEEP

    3072:yJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JYa//2uFrSc:zfYOX+wTScR/Xzku9LVwDuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_c9c3f3979b1b53ae01df78874721490e46b0ecafc00984deda03669749710bd6

    • Size

      184KB

    • MD5

      7e8e33cd92ddb0256ee5a5ae329875d6

    • SHA1

      9eb3e0530ac352b969e1a0fcd8beea6eedc45714

    • SHA256

      c9c3f3979b1b53ae01df78874721490e46b0ecafc00984deda03669749710bd6

    • SHA512

      22a114f63ad17e02afabc7c3fd8a3b49f325d6eb323b0729987c5e44205b8b6dfb023bebd02324b7bec7f5aaca7d5ef9c53a36009e7bef7456f70009465e615b

    • SSDEEP

      3072:yJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JYa//2uFrSc:zfYOX+wTScR/Xzku9LVwDuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks