General

  • Target

    JaffaCakes118_ebfaa4159ce74029462269fa3b4afa4ed052676a5e11799e766b5e75faf35dfd

  • Size

    184KB

  • Sample

    241225-ep4vnaxmcw

  • MD5

    da3bede3d0b581ae19ee54860be03dc6

  • SHA1

    c59d43485d003c6cc31db12e9e51a2bdac6845b1

  • SHA256

    ebfaa4159ce74029462269fa3b4afa4ed052676a5e11799e766b5e75faf35dfd

  • SHA512

    9772694ff1788b84267752d505670234918f0ca9991ea5ddab71f1192ea91f4f19758a35f4dc54dfdeb21fb91907833706fff455bbee46f77d84929249459393

  • SSDEEP

    3072:OiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoplzoxss7:OiLVCIT4WK2z1W+CUHZj4Skq/eao3oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_ebfaa4159ce74029462269fa3b4afa4ed052676a5e11799e766b5e75faf35dfd

    • Size

      184KB

    • MD5

      da3bede3d0b581ae19ee54860be03dc6

    • SHA1

      c59d43485d003c6cc31db12e9e51a2bdac6845b1

    • SHA256

      ebfaa4159ce74029462269fa3b4afa4ed052676a5e11799e766b5e75faf35dfd

    • SHA512

      9772694ff1788b84267752d505670234918f0ca9991ea5ddab71f1192ea91f4f19758a35f4dc54dfdeb21fb91907833706fff455bbee46f77d84929249459393

    • SSDEEP

      3072:OiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoplzoxss7:OiLVCIT4WK2z1W+CUHZj4Skq/eao3oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks