General

  • Target

    JaffaCakes118_be360577b7d2e6b25bf636e7a38de62bfcb8399005c77b91372cfabd849a00f3

  • Size

    184KB

  • Sample

    241225-h4l5ya1kct

  • MD5

    eb8e43771bf7a1dfa24a2a9fba3478b0

  • SHA1

    1432ece8ece1ccc188e4d14c36e22fa0db896baf

  • SHA256

    be360577b7d2e6b25bf636e7a38de62bfcb8399005c77b91372cfabd849a00f3

  • SHA512

    255e93d1ac966bbd61a809c8ac9f680d7f2f553f08fdaa3c8fca806c45b08aed76e63a7ad26eef1cd0efd38a7e8b2a11206d80e71467d075adb3b78f8483707a

  • SSDEEP

    3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoxlzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaovoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_be360577b7d2e6b25bf636e7a38de62bfcb8399005c77b91372cfabd849a00f3

    • Size

      184KB

    • MD5

      eb8e43771bf7a1dfa24a2a9fba3478b0

    • SHA1

      1432ece8ece1ccc188e4d14c36e22fa0db896baf

    • SHA256

      be360577b7d2e6b25bf636e7a38de62bfcb8399005c77b91372cfabd849a00f3

    • SHA512

      255e93d1ac966bbd61a809c8ac9f680d7f2f553f08fdaa3c8fca806c45b08aed76e63a7ad26eef1cd0efd38a7e8b2a11206d80e71467d075adb3b78f8483707a

    • SSDEEP

      3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoxlzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaovoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks