General

  • Target

    JaffaCakes118_974e73ed17364f818f89ba77e5aa7b204938aaf09d82b2e77b8cf03d00463451

  • Size

    184KB

  • Sample

    241224-nz82sswqbw

  • MD5

    4924a5799ca9a96c59c2c9cc158dc0b2

  • SHA1

    164145930f94fbdf7394b32ca76c74f5601d7522

  • SHA256

    974e73ed17364f818f89ba77e5aa7b204938aaf09d82b2e77b8cf03d00463451

  • SHA512

    df8813b35cb246d8d3b832efa65c2336ecdeea6702f9f88f54d8d82b525acc50475e3b701a280015cc0a0712f60ccb11d5025b3655a14f26393c2ab9d7adef0f

  • SSDEEP

    3072:PiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaollzoxss7:PiLVCIT4WK2z1W+CUHZj4Skq/eaoroC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_974e73ed17364f818f89ba77e5aa7b204938aaf09d82b2e77b8cf03d00463451

    • Size

      184KB

    • MD5

      4924a5799ca9a96c59c2c9cc158dc0b2

    • SHA1

      164145930f94fbdf7394b32ca76c74f5601d7522

    • SHA256

      974e73ed17364f818f89ba77e5aa7b204938aaf09d82b2e77b8cf03d00463451

    • SHA512

      df8813b35cb246d8d3b832efa65c2336ecdeea6702f9f88f54d8d82b525acc50475e3b701a280015cc0a0712f60ccb11d5025b3655a14f26393c2ab9d7adef0f

    • SSDEEP

      3072:PiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaollzoxss7:PiLVCIT4WK2z1W+CUHZj4Skq/eaoroC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks