General

  • Target

    JaffaCakes118_251f917967eaf9f58fb933c275a990d5ec211fc819bdc9b897fcd7e5ede4711a

  • Size

    184KB

  • Sample

    241224-rkpldszkbn

  • MD5

    a0b503aae87325073794f5328bec8a5a

  • SHA1

    76ca0cab7dbf1d21c510098aaff2721abc7e37a0

  • SHA256

    251f917967eaf9f58fb933c275a990d5ec211fc819bdc9b897fcd7e5ede4711a

  • SHA512

    ca59d4fd6b46a485b68050258232126b849d83909edc26cd0327a23bd715e1d08bf62b912629e66636ac50306a6dd78a1146d36bb84b872aa9b4254bb217a13d

  • SSDEEP

    3072:4iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoIlzoxss7:4iLVCIT4WK2z1W+CUHZj4Skq/eaoWoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_251f917967eaf9f58fb933c275a990d5ec211fc819bdc9b897fcd7e5ede4711a

    • Size

      184KB

    • MD5

      a0b503aae87325073794f5328bec8a5a

    • SHA1

      76ca0cab7dbf1d21c510098aaff2721abc7e37a0

    • SHA256

      251f917967eaf9f58fb933c275a990d5ec211fc819bdc9b897fcd7e5ede4711a

    • SHA512

      ca59d4fd6b46a485b68050258232126b849d83909edc26cd0327a23bd715e1d08bf62b912629e66636ac50306a6dd78a1146d36bb84b872aa9b4254bb217a13d

    • SSDEEP

      3072:4iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoIlzoxss7:4iLVCIT4WK2z1W+CUHZj4Skq/eaoWoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks