General

  • Target

    JaffaCakes118_d8f65fcd299bb899a3f66e417ca88c3842c96815590209e4a4082411483a47ac

  • Size

    184KB

  • Sample

    241225-b8qwcstnhj

  • MD5

    479942982001a51f64c454fc1ef6831f

  • SHA1

    6e8b9fa4760d8174251bb29971613959d3b9076e

  • SHA256

    d8f65fcd299bb899a3f66e417ca88c3842c96815590209e4a4082411483a47ac

  • SHA512

    6f1d6e3db1799bb6b37ea80ff42a9edadc73d78b6e91216d502487b9309a76d216ea8fc4196b265c3b57e19ab6b82d35d4725377f985bea99e507c755ad00dde

  • SSDEEP

    3072:oiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaollzoxss7:oiLVCIT4WK2z1W+CUHZj4Skq/eaoroC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_d8f65fcd299bb899a3f66e417ca88c3842c96815590209e4a4082411483a47ac

    • Size

      184KB

    • MD5

      479942982001a51f64c454fc1ef6831f

    • SHA1

      6e8b9fa4760d8174251bb29971613959d3b9076e

    • SHA256

      d8f65fcd299bb899a3f66e417ca88c3842c96815590209e4a4082411483a47ac

    • SHA512

      6f1d6e3db1799bb6b37ea80ff42a9edadc73d78b6e91216d502487b9309a76d216ea8fc4196b265c3b57e19ab6b82d35d4725377f985bea99e507c755ad00dde

    • SSDEEP

      3072:oiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaollzoxss7:oiLVCIT4WK2z1W+CUHZj4Skq/eaoroC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks