General

  • Target

    JaffaCakes118_914ef0d361f952c46e90a397373086ba9c35c531f376588aa4f1a95e93afa407

  • Size

    184KB

  • Sample

    241224-t6vewa1rdw

  • MD5

    80779fec555c8c42d49c4f7dfae367df

  • SHA1

    73a454fbd654788325578f11a9cf7e0e0a8e0d37

  • SHA256

    914ef0d361f952c46e90a397373086ba9c35c531f376588aa4f1a95e93afa407

  • SHA512

    73047b835e998c62a8a73f8c6b7cf370e6c15011138f6bfe1fa1fd62a21cbc46aa20b377b180a04a1e7246faafc14aa4c24da04b392d9efb245da2e4ac8627af

  • SSDEEP

    3072:6iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoplzoxss7:6iLVCIT4WK2z1W+CUHZj4Skq/eao3oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_914ef0d361f952c46e90a397373086ba9c35c531f376588aa4f1a95e93afa407

    • Size

      184KB

    • MD5

      80779fec555c8c42d49c4f7dfae367df

    • SHA1

      73a454fbd654788325578f11a9cf7e0e0a8e0d37

    • SHA256

      914ef0d361f952c46e90a397373086ba9c35c531f376588aa4f1a95e93afa407

    • SHA512

      73047b835e998c62a8a73f8c6b7cf370e6c15011138f6bfe1fa1fd62a21cbc46aa20b377b180a04a1e7246faafc14aa4c24da04b392d9efb245da2e4ac8627af

    • SSDEEP

      3072:6iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoplzoxss7:6iLVCIT4WK2z1W+CUHZj4Skq/eao3oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks