General

  • Target

    JaffaCakes118_74410193878ddf384460acbb101c6c02a2c84a894c3c11b1dfd50c1f8062c621

  • Size

    184KB

  • Sample

    241225-chal5atpet

  • MD5

    d885cb6741ee6fc666ec02b447ee5b33

  • SHA1

    208e6fef546829fd8f0c6f547b2ee28ef41f53e6

  • SHA256

    74410193878ddf384460acbb101c6c02a2c84a894c3c11b1dfd50c1f8062c621

  • SHA512

    07c4fb5c26db010880b50fc3e74d2986c7c38cbf9d6b785173f33bb57253dfcef50db76186bbcaa113318e7864b886a43f3424cf05ba19f0bd70ac53512a6845

  • SSDEEP

    3072:+iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoolzoxss7:+iLVCIT4WK2z1W+CUHZj4Skq/eao2oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_74410193878ddf384460acbb101c6c02a2c84a894c3c11b1dfd50c1f8062c621

    • Size

      184KB

    • MD5

      d885cb6741ee6fc666ec02b447ee5b33

    • SHA1

      208e6fef546829fd8f0c6f547b2ee28ef41f53e6

    • SHA256

      74410193878ddf384460acbb101c6c02a2c84a894c3c11b1dfd50c1f8062c621

    • SHA512

      07c4fb5c26db010880b50fc3e74d2986c7c38cbf9d6b785173f33bb57253dfcef50db76186bbcaa113318e7864b886a43f3424cf05ba19f0bd70ac53512a6845

    • SSDEEP

      3072:+iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoolzoxss7:+iLVCIT4WK2z1W+CUHZj4Skq/eao2oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks