General

  • Target

    JaffaCakes118_675307603d7ee195b60366f3939cee72050bf41c1a39be49904ec3b76719d8d2

  • Size

    184KB

  • Sample

    241225-cel6ratqbr

  • MD5

    a510222c9d5eae431be202037e50e7fd

  • SHA1

    b6fa76ddd474159e1df29a1a350a7eb6e0d8690f

  • SHA256

    675307603d7ee195b60366f3939cee72050bf41c1a39be49904ec3b76719d8d2

  • SHA512

    0969092db11f6040e73331066656f5a4a7f459429d95033ab9085ed410fc4556ce18652998351fad24d11ea813918679c2bf79e377b57b1283288729a21adcef

  • SSDEEP

    3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoTlzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoJoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_675307603d7ee195b60366f3939cee72050bf41c1a39be49904ec3b76719d8d2

    • Size

      184KB

    • MD5

      a510222c9d5eae431be202037e50e7fd

    • SHA1

      b6fa76ddd474159e1df29a1a350a7eb6e0d8690f

    • SHA256

      675307603d7ee195b60366f3939cee72050bf41c1a39be49904ec3b76719d8d2

    • SHA512

      0969092db11f6040e73331066656f5a4a7f459429d95033ab9085ed410fc4556ce18652998351fad24d11ea813918679c2bf79e377b57b1283288729a21adcef

    • SSDEEP

      3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoTlzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoJoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks