General

  • Target

    JaffaCakes118_94c2e528513923b184bf698e73b8f49c09efaf43fcd7018d5ef2d12489b404f4

  • Size

    184KB

  • Sample

    241225-bjersssqdt

  • MD5

    e8565b946ac14aea535923d102f24c06

  • SHA1

    8af3722b8367b95a1505e3ee05d5f5794503d424

  • SHA256

    94c2e528513923b184bf698e73b8f49c09efaf43fcd7018d5ef2d12489b404f4

  • SHA512

    4eecd06d6f49afab0a2d42867f51c5cd8e56827c89fd449699915245200969aeacffe6a5572d9227f3ef1f5402f66542e0ec2d9da592657a3f4b7469d19f5ddb

  • SSDEEP

    3072:qiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaodlzoxss7:qiLVCIT4WK2z1W+CUHZj4Skq/eaozoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_94c2e528513923b184bf698e73b8f49c09efaf43fcd7018d5ef2d12489b404f4

    • Size

      184KB

    • MD5

      e8565b946ac14aea535923d102f24c06

    • SHA1

      8af3722b8367b95a1505e3ee05d5f5794503d424

    • SHA256

      94c2e528513923b184bf698e73b8f49c09efaf43fcd7018d5ef2d12489b404f4

    • SHA512

      4eecd06d6f49afab0a2d42867f51c5cd8e56827c89fd449699915245200969aeacffe6a5572d9227f3ef1f5402f66542e0ec2d9da592657a3f4b7469d19f5ddb

    • SSDEEP

      3072:qiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaodlzoxss7:qiLVCIT4WK2z1W+CUHZj4Skq/eaozoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks