General

  • Target

    JaffaCakes118_9b51ef58e632f004dc475271bd1a17cbbfba0c7d367144c749971c37ad3fe957

  • Size

    184KB

  • Sample

    241224-qylk8aylhx

  • MD5

    3c98882cbe0d85a6311996b2e51eed2b

  • SHA1

    30c8b5013538b3e33ced85e365a51002acb4b207

  • SHA256

    9b51ef58e632f004dc475271bd1a17cbbfba0c7d367144c749971c37ad3fe957

  • SHA512

    5f75e43eb3249cf34206ea86136dccadc40503645024a251dedf631dc4a4bfd5527f598560bdd08cbb3159171794dbf5a39096fb2498a8828c2ef641462a9250

  • SSDEEP

    3072:RiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao3lzoxss7:RiLVCIT4WK2z1W+CUHZj4Skq/eaoFoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_9b51ef58e632f004dc475271bd1a17cbbfba0c7d367144c749971c37ad3fe957

    • Size

      184KB

    • MD5

      3c98882cbe0d85a6311996b2e51eed2b

    • SHA1

      30c8b5013538b3e33ced85e365a51002acb4b207

    • SHA256

      9b51ef58e632f004dc475271bd1a17cbbfba0c7d367144c749971c37ad3fe957

    • SHA512

      5f75e43eb3249cf34206ea86136dccadc40503645024a251dedf631dc4a4bfd5527f598560bdd08cbb3159171794dbf5a39096fb2498a8828c2ef641462a9250

    • SSDEEP

      3072:RiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao3lzoxss7:RiLVCIT4WK2z1W+CUHZj4Skq/eaoFoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks