General

  • Target

    JaffaCakes118_96c03c441e50e714d5ede6d0ccedc11a04db618fa60e7cf9155464988bf1edfa

  • Size

    184KB

  • Sample

    241225-1nx7daypat

  • MD5

    2a1484c9c8c1be1f90ce85f5cdb1d5ba

  • SHA1

    3ae075f7a9800ad3673e02880a0db9acc7611d57

  • SHA256

    96c03c441e50e714d5ede6d0ccedc11a04db618fa60e7cf9155464988bf1edfa

  • SHA512

    86d2c011a47c7a80dae810399297f95a892fcb19c392c4b05f2253eba51b2e18706e7a82c07d65523530cbf8f97a57eb8261c15218d68501b53516520d68779f

  • SSDEEP

    3072:7iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaojlzoxss7:7iLVCIT4WK2z1W+CUHZj4Skq/eao5oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_96c03c441e50e714d5ede6d0ccedc11a04db618fa60e7cf9155464988bf1edfa

    • Size

      184KB

    • MD5

      2a1484c9c8c1be1f90ce85f5cdb1d5ba

    • SHA1

      3ae075f7a9800ad3673e02880a0db9acc7611d57

    • SHA256

      96c03c441e50e714d5ede6d0ccedc11a04db618fa60e7cf9155464988bf1edfa

    • SHA512

      86d2c011a47c7a80dae810399297f95a892fcb19c392c4b05f2253eba51b2e18706e7a82c07d65523530cbf8f97a57eb8261c15218d68501b53516520d68779f

    • SSDEEP

      3072:7iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaojlzoxss7:7iLVCIT4WK2z1W+CUHZj4Skq/eao5oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks