General

  • Target

    JaffaCakes118_ef1a85e7f475f46e7b2a2cb5c39165844c1290f91ba93b72715884240b140b3e

  • Size

    184KB

  • Sample

    241224-pe2mnaxmek

  • MD5

    4e329969dbe7229504a8f9741dfcf3e1

  • SHA1

    9bb54e2ed2c79497050df65d831e66f2801afbc2

  • SHA256

    ef1a85e7f475f46e7b2a2cb5c39165844c1290f91ba93b72715884240b140b3e

  • SHA512

    89865459487d03369dfc6c64d0b180793b37cbef15ed8ec5f7e82b3ca50d9468280f093dbe47b9122d21515d001e9519ce7004ee379e23139a375b91166c9882

  • SSDEEP

    3072:9iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoSlzoxss7:9iLVCIT4WK2z1W+CUHZj4Skq/eaoYoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_ef1a85e7f475f46e7b2a2cb5c39165844c1290f91ba93b72715884240b140b3e

    • Size

      184KB

    • MD5

      4e329969dbe7229504a8f9741dfcf3e1

    • SHA1

      9bb54e2ed2c79497050df65d831e66f2801afbc2

    • SHA256

      ef1a85e7f475f46e7b2a2cb5c39165844c1290f91ba93b72715884240b140b3e

    • SHA512

      89865459487d03369dfc6c64d0b180793b37cbef15ed8ec5f7e82b3ca50d9468280f093dbe47b9122d21515d001e9519ce7004ee379e23139a375b91166c9882

    • SSDEEP

      3072:9iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoSlzoxss7:9iLVCIT4WK2z1W+CUHZj4Skq/eaoYoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks