General

  • Target

    JaffaCakes118_6e25a96c6cef3b00eeea7b281c2586150a469375c131f1c23bab20ad8d18035e

  • Size

    184KB

  • Sample

    241225-1zymaazmem

  • MD5

    5cea422ed9c70a36793fc2cd94173c6d

  • SHA1

    3d174b4154a89ca59a377c660b4319a71500b54a

  • SHA256

    6e25a96c6cef3b00eeea7b281c2586150a469375c131f1c23bab20ad8d18035e

  • SHA512

    3a6fb05bde20c771cc8cad4a948cd01cc06b467a4dd2454bfc3a6d50569b21e1660ff50d92a45dd48bee9cbeb41fe5638d15363663ba2041e9ca5f136c3dd7ce

  • SSDEEP

    3072:OiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoNlzoxss7:OiLVCIT4WK2z1W+CUHZj4Skq/eaoDoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_6e25a96c6cef3b00eeea7b281c2586150a469375c131f1c23bab20ad8d18035e

    • Size

      184KB

    • MD5

      5cea422ed9c70a36793fc2cd94173c6d

    • SHA1

      3d174b4154a89ca59a377c660b4319a71500b54a

    • SHA256

      6e25a96c6cef3b00eeea7b281c2586150a469375c131f1c23bab20ad8d18035e

    • SHA512

      3a6fb05bde20c771cc8cad4a948cd01cc06b467a4dd2454bfc3a6d50569b21e1660ff50d92a45dd48bee9cbeb41fe5638d15363663ba2041e9ca5f136c3dd7ce

    • SSDEEP

      3072:OiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoNlzoxss7:OiLVCIT4WK2z1W+CUHZj4Skq/eaoDoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks