General

  • Target

    JaffaCakes118_5dba60b962e6b09516f054fdd3889d66aaafb93583da143003237acf59be20da

  • Size

    184KB

  • Sample

    241224-zhr8haxkcp

  • MD5

    97772ffec3ae746c2fbcb643a869b3b9

  • SHA1

    57d0fc33adfa9c9d8b9c82f3863ff56b143b8864

  • SHA256

    5dba60b962e6b09516f054fdd3889d66aaafb93583da143003237acf59be20da

  • SHA512

    948c41c750192ecb7afa6aebb037daa89f073755f6b32167e907992d3786f3b16a59fde4cec4a1486f119ba45d58ff9770163887c2bc4cc5a9643e5b4506d063

  • SSDEEP

    3072:hiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao/lzoxss7:hiLVCIT4WK2z1W+CUHZj4Skq/eaodoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_5dba60b962e6b09516f054fdd3889d66aaafb93583da143003237acf59be20da

    • Size

      184KB

    • MD5

      97772ffec3ae746c2fbcb643a869b3b9

    • SHA1

      57d0fc33adfa9c9d8b9c82f3863ff56b143b8864

    • SHA256

      5dba60b962e6b09516f054fdd3889d66aaafb93583da143003237acf59be20da

    • SHA512

      948c41c750192ecb7afa6aebb037daa89f073755f6b32167e907992d3786f3b16a59fde4cec4a1486f119ba45d58ff9770163887c2bc4cc5a9643e5b4506d063

    • SSDEEP

      3072:hiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao/lzoxss7:hiLVCIT4WK2z1W+CUHZj4Skq/eaodoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks