General

  • Target

    JaffaCakes118_6d48122dedaca0f5392496bb387b3d8ed0b2d31c59163116a592e37b22d494fc

  • Size

    184KB

  • Sample

    241224-vktrwsslgz

  • MD5

    f0152911cc0319a69dfb542d691d17c6

  • SHA1

    4ffee847d290dccc05cd2c9591b08594091ef06f

  • SHA256

    6d48122dedaca0f5392496bb387b3d8ed0b2d31c59163116a592e37b22d494fc

  • SHA512

    d330a4971e8475885a5e1d975ff694e098b5d1d3791e5e0f18e255c6b0b40e0d4469aed49e9ea75b46c0592ad698e13c5daa3ba53d0112d21194fec710d9ff55

  • SSDEEP

    3072:RiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaotlzoxss7:RiLVCIT4WK2z1W+CUHZj4Skq/eaojoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_6d48122dedaca0f5392496bb387b3d8ed0b2d31c59163116a592e37b22d494fc

    • Size

      184KB

    • MD5

      f0152911cc0319a69dfb542d691d17c6

    • SHA1

      4ffee847d290dccc05cd2c9591b08594091ef06f

    • SHA256

      6d48122dedaca0f5392496bb387b3d8ed0b2d31c59163116a592e37b22d494fc

    • SHA512

      d330a4971e8475885a5e1d975ff694e098b5d1d3791e5e0f18e255c6b0b40e0d4469aed49e9ea75b46c0592ad698e13c5daa3ba53d0112d21194fec710d9ff55

    • SSDEEP

      3072:RiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaotlzoxss7:RiLVCIT4WK2z1W+CUHZj4Skq/eaojoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks