General

  • Target

    JaffaCakes118_8d21b1e5260a44b696b61d6f34fcacce2ad96d9a2a7fb75b8ac71c0f9eb1ce4d

  • Size

    184KB

  • Sample

    241224-lpfamatrfm

  • MD5

    5de0c82e1c5bdac57aedbe7bb66afd5b

  • SHA1

    b5c6218b66d96903b99fbc8cd5f550440185b6a7

  • SHA256

    8d21b1e5260a44b696b61d6f34fcacce2ad96d9a2a7fb75b8ac71c0f9eb1ce4d

  • SHA512

    60dbc0493841fb70cfe2a3103e78c335bf27ffd3818fd01749162029213b741f2f84e01d8458ccf9a45b778d19743934176bf56f836580a219a3d0e9e75b2dd9

  • SSDEEP

    3072:8JQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jma//2uFrSc:BfYOX+wTScR/Xzku9LVwJuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_8d21b1e5260a44b696b61d6f34fcacce2ad96d9a2a7fb75b8ac71c0f9eb1ce4d

    • Size

      184KB

    • MD5

      5de0c82e1c5bdac57aedbe7bb66afd5b

    • SHA1

      b5c6218b66d96903b99fbc8cd5f550440185b6a7

    • SHA256

      8d21b1e5260a44b696b61d6f34fcacce2ad96d9a2a7fb75b8ac71c0f9eb1ce4d

    • SHA512

      60dbc0493841fb70cfe2a3103e78c335bf27ffd3818fd01749162029213b741f2f84e01d8458ccf9a45b778d19743934176bf56f836580a219a3d0e9e75b2dd9

    • SSDEEP

      3072:8JQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jma//2uFrSc:BfYOX+wTScR/Xzku9LVwJuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks