General

  • Target

    JaffaCakes118_8cd19667eb736e008e1eb030a6cd2fa4c469949357919ff5e439accc9c890b1b

  • Size

    184KB

  • Sample

    241224-ycpdzsvngz

  • MD5

    675ca94de37c37e60b7449216fb4e535

  • SHA1

    bd0f960c56e0ea2ee6d8508b591bf7777e81cb9e

  • SHA256

    8cd19667eb736e008e1eb030a6cd2fa4c469949357919ff5e439accc9c890b1b

  • SHA512

    b34f153ca25403704ac9b0a9c788ba95123b9a29899e9df32d688f00db807052db2d2151e9765a508e7feb50b67aec51cb7b6157d1038ae49453bba8ca01293b

  • SSDEEP

    3072:NiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoAlzoxss7:NiLVCIT4WK2z1W+CUHZj4Skq/eao+oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_8cd19667eb736e008e1eb030a6cd2fa4c469949357919ff5e439accc9c890b1b

    • Size

      184KB

    • MD5

      675ca94de37c37e60b7449216fb4e535

    • SHA1

      bd0f960c56e0ea2ee6d8508b591bf7777e81cb9e

    • SHA256

      8cd19667eb736e008e1eb030a6cd2fa4c469949357919ff5e439accc9c890b1b

    • SHA512

      b34f153ca25403704ac9b0a9c788ba95123b9a29899e9df32d688f00db807052db2d2151e9765a508e7feb50b67aec51cb7b6157d1038ae49453bba8ca01293b

    • SSDEEP

      3072:NiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoAlzoxss7:NiLVCIT4WK2z1W+CUHZj4Skq/eao+oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks