General

  • Target

    JaffaCakes118_a2abc7fb98dae306eb9ba35affc11b0ebbaaf5c61ad4de94d54ccab30e303bb9

  • Size

    164KB

  • Sample

    241224-xepxvstrgk

  • MD5

    0983bcd664bf02fb8a44aabe03ef1d4d

  • SHA1

    14a6155b93b91401ead25d876907410d27d646b8

  • SHA256

    a2abc7fb98dae306eb9ba35affc11b0ebbaaf5c61ad4de94d54ccab30e303bb9

  • SHA512

    70221e904cd706bdf15a58f2e1754f5aaa062cb3ff0dfdde23c4a0d95d132e5df5059b89bd79e653c1759771181faa729de2f900b75834ace34ca821600b0ab4

  • SSDEEP

    3072:VBefihU8fQ2Sob/xg+eNV1A1I3aiI8i3GdVAzuECtNjP3/3ioP7y11a0E:VBefiv/12+2A1AIpFzxCtNjHSoPm11J

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

45.123.40.54:443

82.209.17.209:8172

180.250.21.2:13721

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_a2abc7fb98dae306eb9ba35affc11b0ebbaaf5c61ad4de94d54ccab30e303bb9

    • Size

      164KB

    • MD5

      0983bcd664bf02fb8a44aabe03ef1d4d

    • SHA1

      14a6155b93b91401ead25d876907410d27d646b8

    • SHA256

      a2abc7fb98dae306eb9ba35affc11b0ebbaaf5c61ad4de94d54ccab30e303bb9

    • SHA512

      70221e904cd706bdf15a58f2e1754f5aaa062cb3ff0dfdde23c4a0d95d132e5df5059b89bd79e653c1759771181faa729de2f900b75834ace34ca821600b0ab4

    • SSDEEP

      3072:VBefihU8fQ2Sob/xg+eNV1A1I3aiI8i3GdVAzuECtNjP3/3ioP7y11a0E:VBefiv/12+2A1AIpFzxCtNjHSoPm11J

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks