General

  • Target

    JaffaCakes118_89e093e435284f7509bd9f064c07e8f2fc1e0fe980fb2a2533fe46a4f258c278

  • Size

    184KB

  • Sample

    241224-laarlatmds

  • MD5

    db87bbe10d8bcd8a6c2408af70135b4d

  • SHA1

    183eca7bb091cccb3fcc8e926b30058b44809235

  • SHA256

    89e093e435284f7509bd9f064c07e8f2fc1e0fe980fb2a2533fe46a4f258c278

  • SHA512

    06df3c08fc99e7232beb918fc7497a953a97bdb18ec198636f33445e072ca36cffc1da91cb5c07d087607ea44f6135eb76046eb5b6ec5e7abed12c881643a7da

  • SSDEEP

    3072:KlJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jla//2uFrSc:KOfYOX+wTScR/Xzku9LVwiuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_89e093e435284f7509bd9f064c07e8f2fc1e0fe980fb2a2533fe46a4f258c278

    • Size

      184KB

    • MD5

      db87bbe10d8bcd8a6c2408af70135b4d

    • SHA1

      183eca7bb091cccb3fcc8e926b30058b44809235

    • SHA256

      89e093e435284f7509bd9f064c07e8f2fc1e0fe980fb2a2533fe46a4f258c278

    • SHA512

      06df3c08fc99e7232beb918fc7497a953a97bdb18ec198636f33445e072ca36cffc1da91cb5c07d087607ea44f6135eb76046eb5b6ec5e7abed12c881643a7da

    • SSDEEP

      3072:KlJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jla//2uFrSc:KOfYOX+wTScR/Xzku9LVwiuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks