General

  • Target

    JaffaCakes118_0fcf7a85abe6fa6dbc7b42021cc06873603250211bac4ad40a435a7599078da8

  • Size

    184KB

  • Sample

    241224-pw2c8axnat

  • MD5

    26f89f1fc2523673ca9b1166ff3bf1dd

  • SHA1

    13c0431b6b89b837a16a1e28d7ee428761fe9b99

  • SHA256

    0fcf7a85abe6fa6dbc7b42021cc06873603250211bac4ad40a435a7599078da8

  • SHA512

    843d87d0dd2374c164cecd909e3fa9a6d80de4410505f829516b69dccce2691c2bfdc6aaad16822169239dcf997f5d3645a33956da407c3c3549ccb840bdbed9

  • SSDEEP

    3072:oiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao8lzoxss7:oiLVCIT4WK2z1W+CUHZj4Skq/eaoCoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_0fcf7a85abe6fa6dbc7b42021cc06873603250211bac4ad40a435a7599078da8

    • Size

      184KB

    • MD5

      26f89f1fc2523673ca9b1166ff3bf1dd

    • SHA1

      13c0431b6b89b837a16a1e28d7ee428761fe9b99

    • SHA256

      0fcf7a85abe6fa6dbc7b42021cc06873603250211bac4ad40a435a7599078da8

    • SHA512

      843d87d0dd2374c164cecd909e3fa9a6d80de4410505f829516b69dccce2691c2bfdc6aaad16822169239dcf997f5d3645a33956da407c3c3549ccb840bdbed9

    • SSDEEP

      3072:oiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao8lzoxss7:oiLVCIT4WK2z1W+CUHZj4Skq/eaoCoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks