General

  • Target

    JaffaCakes118_1e928a5e98fb9bee873adaaa793bb45c522395f05151439cfe45e400605557bc

  • Size

    184KB

  • Sample

    241225-ctsxvavlep

  • MD5

    a1e0784288a376e5d842ffb47063f350

  • SHA1

    ce913e90237035271dd9ca44c8206c34508d15b1

  • SHA256

    1e928a5e98fb9bee873adaaa793bb45c522395f05151439cfe45e400605557bc

  • SHA512

    aa0f18a5a94733093889f5ad77ac8348445cc56452ad5710303e9b51247f1ab5a6c3095ac3c0dd763cb3b4a142f6d127dbde6cb3c195a5af489b0ca6b026ee4c

  • SSDEEP

    3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoIlzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoWoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_1e928a5e98fb9bee873adaaa793bb45c522395f05151439cfe45e400605557bc

    • Size

      184KB

    • MD5

      a1e0784288a376e5d842ffb47063f350

    • SHA1

      ce913e90237035271dd9ca44c8206c34508d15b1

    • SHA256

      1e928a5e98fb9bee873adaaa793bb45c522395f05151439cfe45e400605557bc

    • SHA512

      aa0f18a5a94733093889f5ad77ac8348445cc56452ad5710303e9b51247f1ab5a6c3095ac3c0dd763cb3b4a142f6d127dbde6cb3c195a5af489b0ca6b026ee4c

    • SSDEEP

      3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoIlzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoWoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks