General

  • Target

    JaffaCakes118_57f23fe6f5644847b7304c6e6d6c7ca427abb92eca9f7b2ba051d7f901105dba

  • Size

    184KB

  • Sample

    241224-zegmlawras

  • MD5

    b044c7b065f8a165698e464a258d5e40

  • SHA1

    394aa170103e748af65603dd796d2d581e5bd2ff

  • SHA256

    57f23fe6f5644847b7304c6e6d6c7ca427abb92eca9f7b2ba051d7f901105dba

  • SHA512

    21f88445c0bef41b28051b5c4cfa10f50bc11a62e45db3d1e7c865b1237c1b6db96ce49c68c27a12fa078ee5ab86a81b465fbc139d94f83d28ede5b192a2302c

  • SSDEEP

    3072:6iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaomlzoxss7:6iLVCIT4WK2z1W+CUHZj4Skq/eao0oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_57f23fe6f5644847b7304c6e6d6c7ca427abb92eca9f7b2ba051d7f901105dba

    • Size

      184KB

    • MD5

      b044c7b065f8a165698e464a258d5e40

    • SHA1

      394aa170103e748af65603dd796d2d581e5bd2ff

    • SHA256

      57f23fe6f5644847b7304c6e6d6c7ca427abb92eca9f7b2ba051d7f901105dba

    • SHA512

      21f88445c0bef41b28051b5c4cfa10f50bc11a62e45db3d1e7c865b1237c1b6db96ce49c68c27a12fa078ee5ab86a81b465fbc139d94f83d28ede5b192a2302c

    • SSDEEP

      3072:6iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaomlzoxss7:6iLVCIT4WK2z1W+CUHZj4Skq/eao0oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks