General

  • Target

    JaffaCakes118_72a0cdf36366b5cdbd85f31c032da93a8b78c08823d8b4d94314b373da4dcd1d

  • Size

    184KB

  • Sample

    241225-fkbtraynbk

  • MD5

    efec56b50937c700a5733e256e539a66

  • SHA1

    cc63bdb521b68bb215eb58130c989d19bf15a918

  • SHA256

    72a0cdf36366b5cdbd85f31c032da93a8b78c08823d8b4d94314b373da4dcd1d

  • SHA512

    310db93c601dc82cff4a00a79c5b639e64408a6ddc342f07eb360ab48b71e53ae527bfde34941364404dbd286cbae1c495986526de491208774de12494fba7cc

  • SSDEEP

    3072:diLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaomlzoxss7:diLVCIT4WK2z1W+CUHZj4Skq/eao0oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_72a0cdf36366b5cdbd85f31c032da93a8b78c08823d8b4d94314b373da4dcd1d

    • Size

      184KB

    • MD5

      efec56b50937c700a5733e256e539a66

    • SHA1

      cc63bdb521b68bb215eb58130c989d19bf15a918

    • SHA256

      72a0cdf36366b5cdbd85f31c032da93a8b78c08823d8b4d94314b373da4dcd1d

    • SHA512

      310db93c601dc82cff4a00a79c5b639e64408a6ddc342f07eb360ab48b71e53ae527bfde34941364404dbd286cbae1c495986526de491208774de12494fba7cc

    • SSDEEP

      3072:diLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaomlzoxss7:diLVCIT4WK2z1W+CUHZj4Skq/eao0oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks