General

  • Target

    JaffaCakes118_5f10d1c834cb4bc75496a40579838bd509cc372dd06da86e4f4c785f258b5b9c

  • Size

    184KB

  • Sample

    241224-ml2j5avqal

  • MD5

    947a6ccf557bfcb37eac630499910ce7

  • SHA1

    fcfef9732e06b1cb4f366721b7491ed7aa31e944

  • SHA256

    5f10d1c834cb4bc75496a40579838bd509cc372dd06da86e4f4c785f258b5b9c

  • SHA512

    bc050e02b1f2163be533b1c16f2e55a6373c639f35c23555be1f8a3467a436e5766355d5164fc19ddaf0c6360243564663aa218ec80b9a96111ab25f56c82742

  • SSDEEP

    3072:PiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoolzoxss7:PiLVCIT4WK2z1W+CUHZj4Skq/eao2oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_5f10d1c834cb4bc75496a40579838bd509cc372dd06da86e4f4c785f258b5b9c

    • Size

      184KB

    • MD5

      947a6ccf557bfcb37eac630499910ce7

    • SHA1

      fcfef9732e06b1cb4f366721b7491ed7aa31e944

    • SHA256

      5f10d1c834cb4bc75496a40579838bd509cc372dd06da86e4f4c785f258b5b9c

    • SHA512

      bc050e02b1f2163be533b1c16f2e55a6373c639f35c23555be1f8a3467a436e5766355d5164fc19ddaf0c6360243564663aa218ec80b9a96111ab25f56c82742

    • SSDEEP

      3072:PiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoolzoxss7:PiLVCIT4WK2z1W+CUHZj4Skq/eao2oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks