General

  • Target

    JaffaCakes118_5e9a31553505d26a7ea11bbe1f24e25d2d8be06e55bde79d4a65298718aff1ef

  • Size

    184KB

  • Sample

    241224-w354batpfn

  • MD5

    4db341a8717cfbc1310fae2de7a78410

  • SHA1

    82b992351da0c8fe507025b488f182cb3d4b3ed8

  • SHA256

    5e9a31553505d26a7ea11bbe1f24e25d2d8be06e55bde79d4a65298718aff1ef

  • SHA512

    b05eba8388f35462654a6fee0c619e264cd7187b67fa0f0db2e4e31ae44e067b9a489e883de3f2b831c88b94d4c27c918d1af4a6d008bca5155a139b5f0ebc33

  • SSDEEP

    3072:4iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaozlzoxss7:4iLVCIT4WK2z1W+CUHZj4Skq/eaopoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_5e9a31553505d26a7ea11bbe1f24e25d2d8be06e55bde79d4a65298718aff1ef

    • Size

      184KB

    • MD5

      4db341a8717cfbc1310fae2de7a78410

    • SHA1

      82b992351da0c8fe507025b488f182cb3d4b3ed8

    • SHA256

      5e9a31553505d26a7ea11bbe1f24e25d2d8be06e55bde79d4a65298718aff1ef

    • SHA512

      b05eba8388f35462654a6fee0c619e264cd7187b67fa0f0db2e4e31ae44e067b9a489e883de3f2b831c88b94d4c27c918d1af4a6d008bca5155a139b5f0ebc33

    • SSDEEP

      3072:4iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaozlzoxss7:4iLVCIT4WK2z1W+CUHZj4Skq/eaopoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks