General

  • Target

    JaffaCakes118_193f99251e513f0d0bef1a8956894cbd6812d20400f857368fcda4020161df3a

  • Size

    184KB

  • Sample

    241224-ydb52svpay

  • MD5

    5715f31f277f88ddf123c777db0edd94

  • SHA1

    e6dcabf93bdf95bdd8041fe4a687c46ee6ccc4e9

  • SHA256

    193f99251e513f0d0bef1a8956894cbd6812d20400f857368fcda4020161df3a

  • SHA512

    52e83ac52f0e89a75f728b278d145df6ad95c3354211ace70f3b040899d959a7cf1c63eee7a09c0e3a4a361fb7e959103d63344ec2ebd8cd5dcdeb9063316359

  • SSDEEP

    3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoblzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaohoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_193f99251e513f0d0bef1a8956894cbd6812d20400f857368fcda4020161df3a

    • Size

      184KB

    • MD5

      5715f31f277f88ddf123c777db0edd94

    • SHA1

      e6dcabf93bdf95bdd8041fe4a687c46ee6ccc4e9

    • SHA256

      193f99251e513f0d0bef1a8956894cbd6812d20400f857368fcda4020161df3a

    • SHA512

      52e83ac52f0e89a75f728b278d145df6ad95c3354211ace70f3b040899d959a7cf1c63eee7a09c0e3a4a361fb7e959103d63344ec2ebd8cd5dcdeb9063316359

    • SSDEEP

      3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoblzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaohoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks