General

  • Target

    JaffaCakes118_94c7315a124ded8246c0d4c0f30c4ff0d7b3d5770a63b4eab8299319a7a81d99

  • Size

    184KB

  • Sample

    241224-vz78tssphs

  • MD5

    3f9bea8d0ae4dd10c139b5f0a09b91fb

  • SHA1

    289a84a5e92445bd76292a74e0676d321905e2b7

  • SHA256

    94c7315a124ded8246c0d4c0f30c4ff0d7b3d5770a63b4eab8299319a7a81d99

  • SHA512

    ddfbd7d74b01048bd8cbd4253109c21adae3a25ec212313eaac924df7c6017d817647f734497a71032945e7f4d7ac2497bf15199eb13cd90dfdccb76f029cddd

  • SSDEEP

    3072:fiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoJlzoxss7:fiLVCIT4WK2z1W+CUHZj4Skq/eaoXoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_94c7315a124ded8246c0d4c0f30c4ff0d7b3d5770a63b4eab8299319a7a81d99

    • Size

      184KB

    • MD5

      3f9bea8d0ae4dd10c139b5f0a09b91fb

    • SHA1

      289a84a5e92445bd76292a74e0676d321905e2b7

    • SHA256

      94c7315a124ded8246c0d4c0f30c4ff0d7b3d5770a63b4eab8299319a7a81d99

    • SHA512

      ddfbd7d74b01048bd8cbd4253109c21adae3a25ec212313eaac924df7c6017d817647f734497a71032945e7f4d7ac2497bf15199eb13cd90dfdccb76f029cddd

    • SSDEEP

      3072:fiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoJlzoxss7:fiLVCIT4WK2z1W+CUHZj4Skq/eaoXoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks