General

  • Target

    JaffaCakes118_ebbacb3aed7b762511e5805cf7aba14cde7ec3930e8fae390ea5a85d09855f9e

  • Size

    184KB

  • Sample

    241225-c1bbdavndn

  • MD5

    52c00b10b8f30a720c5d83995b833bcf

  • SHA1

    25f966f2db7d98a523940a724ad84935dbffa919

  • SHA256

    ebbacb3aed7b762511e5805cf7aba14cde7ec3930e8fae390ea5a85d09855f9e

  • SHA512

    15331cc2919cac772b407aa5d388ca48151b28d7b6b9e76af1677b166a19d25f5e2cb686a14193fae951788713730c6a370a3c47943ba548d6c80eb6168942a9

  • SSDEEP

    3072:giLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaonlzoxss7:giLVCIT4WK2z1W+CUHZj4Skq/eaoVoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_ebbacb3aed7b762511e5805cf7aba14cde7ec3930e8fae390ea5a85d09855f9e

    • Size

      184KB

    • MD5

      52c00b10b8f30a720c5d83995b833bcf

    • SHA1

      25f966f2db7d98a523940a724ad84935dbffa919

    • SHA256

      ebbacb3aed7b762511e5805cf7aba14cde7ec3930e8fae390ea5a85d09855f9e

    • SHA512

      15331cc2919cac772b407aa5d388ca48151b28d7b6b9e76af1677b166a19d25f5e2cb686a14193fae951788713730c6a370a3c47943ba548d6c80eb6168942a9

    • SSDEEP

      3072:giLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaonlzoxss7:giLVCIT4WK2z1W+CUHZj4Skq/eaoVoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks