General

  • Target

    JaffaCakes118_5a2c41a1c6da1426f5c3aee0ae1e9fd985770bff69a225175113f9c1ecad524f

  • Size

    184KB

  • Sample

    241224-xygetsvlhl

  • MD5

    549e3dab0d33cfd163233eb1180461b2

  • SHA1

    ff429566816e456430d64f424b02eb47acc30430

  • SHA256

    5a2c41a1c6da1426f5c3aee0ae1e9fd985770bff69a225175113f9c1ecad524f

  • SHA512

    f3143be3c80563d12c8e52d9cc50d39c6db0a065cdf34934b95fee81063c24ed892014d85acc695bab23b6060960690300d1fe26123cc2eba2fd4d6db47c3db4

  • SSDEEP

    3072:YiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao7lzoxss7:YiLVCIT4WK2z1W+CUHZj4Skq/eaoBoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_5a2c41a1c6da1426f5c3aee0ae1e9fd985770bff69a225175113f9c1ecad524f

    • Size

      184KB

    • MD5

      549e3dab0d33cfd163233eb1180461b2

    • SHA1

      ff429566816e456430d64f424b02eb47acc30430

    • SHA256

      5a2c41a1c6da1426f5c3aee0ae1e9fd985770bff69a225175113f9c1ecad524f

    • SHA512

      f3143be3c80563d12c8e52d9cc50d39c6db0a065cdf34934b95fee81063c24ed892014d85acc695bab23b6060960690300d1fe26123cc2eba2fd4d6db47c3db4

    • SSDEEP

      3072:YiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao7lzoxss7:YiLVCIT4WK2z1W+CUHZj4Skq/eaoBoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks