General

  • Target

    JaffaCakes118_57aabd43aa718c1083d19ae7c23ebd9c44dbc5cec9c0259294547a08a0607d34

  • Size

    184KB

  • Sample

    241225-1er9rsykhs

  • MD5

    767abc127da580d34f792b3d08e6187a

  • SHA1

    2164874c31e2fe5021d238ad61c4ad83806faef2

  • SHA256

    57aabd43aa718c1083d19ae7c23ebd9c44dbc5cec9c0259294547a08a0607d34

  • SHA512

    eeaa63113ad834187cc4ab9bfda92ca6078006fe860dd5370941efa86bb39d10e610294e50374aa56450f280b71ce12723abeefa049261c6adf368a13f7905de

  • SSDEEP

    3072:0iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoilzoxss7:0iLVCIT4WK2z1W+CUHZj4Skq/eaoIoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_57aabd43aa718c1083d19ae7c23ebd9c44dbc5cec9c0259294547a08a0607d34

    • Size

      184KB

    • MD5

      767abc127da580d34f792b3d08e6187a

    • SHA1

      2164874c31e2fe5021d238ad61c4ad83806faef2

    • SHA256

      57aabd43aa718c1083d19ae7c23ebd9c44dbc5cec9c0259294547a08a0607d34

    • SHA512

      eeaa63113ad834187cc4ab9bfda92ca6078006fe860dd5370941efa86bb39d10e610294e50374aa56450f280b71ce12723abeefa049261c6adf368a13f7905de

    • SSDEEP

      3072:0iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoilzoxss7:0iLVCIT4WK2z1W+CUHZj4Skq/eaoIoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks