General

  • Target

    JaffaCakes118_936a61a2e4ef48b3dc75275c8d867ab3710991939937e6080f4e7d3e8b44ad65

  • Size

    184KB

  • Sample

    241224-ssfh5a1jdp

  • MD5

    4abe5cca4e7f64d50206258170980c2e

  • SHA1

    b0e7453425ab321979c05c839e717606f88eaf19

  • SHA256

    936a61a2e4ef48b3dc75275c8d867ab3710991939937e6080f4e7d3e8b44ad65

  • SHA512

    e20deb3cd0688bd95ab8295d5dc6bf0297c4fccc0a51825f41a9d946c9892d7ce524131aa7b44f297eedf0fa266c6314ba15ec8dbeb2024137be39f1f7ebb9bc

  • SSDEEP

    3072:miLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao+lzoxss7:miLVCIT4WK2z1W+CUHZj4Skq/eaocoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_936a61a2e4ef48b3dc75275c8d867ab3710991939937e6080f4e7d3e8b44ad65

    • Size

      184KB

    • MD5

      4abe5cca4e7f64d50206258170980c2e

    • SHA1

      b0e7453425ab321979c05c839e717606f88eaf19

    • SHA256

      936a61a2e4ef48b3dc75275c8d867ab3710991939937e6080f4e7d3e8b44ad65

    • SHA512

      e20deb3cd0688bd95ab8295d5dc6bf0297c4fccc0a51825f41a9d946c9892d7ce524131aa7b44f297eedf0fa266c6314ba15ec8dbeb2024137be39f1f7ebb9bc

    • SSDEEP

      3072:miLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao+lzoxss7:miLVCIT4WK2z1W+CUHZj4Skq/eaocoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks