General

  • Target

    JaffaCakes118_001262c78034b60b530c6f9b2cf1f39d50c4472cb7bf7020643baa5e34a224a1

  • Size

    184KB

  • Sample

    241224-t7kl3a1rf1

  • MD5

    dcf3c3ec0c7872584ce8cce749179e54

  • SHA1

    a691a9a3e48c6ff5047d8c611ffc6088e521a37c

  • SHA256

    001262c78034b60b530c6f9b2cf1f39d50c4472cb7bf7020643baa5e34a224a1

  • SHA512

    e5afe82a625015b2c353eea58218f39fdd57ef9c38fdf4349274b2b0738cdab93addc43320cbceba3bb911f43df1437181f82dc0f20bd678d12754d83aebbc97

  • SSDEEP

    3072:kiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoVlzoxss7:kiLVCIT4WK2z1W+CUHZj4Skq/eao7oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_001262c78034b60b530c6f9b2cf1f39d50c4472cb7bf7020643baa5e34a224a1

    • Size

      184KB

    • MD5

      dcf3c3ec0c7872584ce8cce749179e54

    • SHA1

      a691a9a3e48c6ff5047d8c611ffc6088e521a37c

    • SHA256

      001262c78034b60b530c6f9b2cf1f39d50c4472cb7bf7020643baa5e34a224a1

    • SHA512

      e5afe82a625015b2c353eea58218f39fdd57ef9c38fdf4349274b2b0738cdab93addc43320cbceba3bb911f43df1437181f82dc0f20bd678d12754d83aebbc97

    • SSDEEP

      3072:kiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoVlzoxss7:kiLVCIT4WK2z1W+CUHZj4Skq/eao7oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks