General

  • Target

    JaffaCakes118_3fe6e715c761f87e0f72beca5c1426e054edb1d817c4b3ef4f61251ed401b87c

  • Size

    184KB

  • Sample

    241225-hdb72szrar

  • MD5

    f1bd5ac2e10c78d9d1680dc026512ac6

  • SHA1

    cf0dead47d5624d29ab28381363d91f54c2f5c34

  • SHA256

    3fe6e715c761f87e0f72beca5c1426e054edb1d817c4b3ef4f61251ed401b87c

  • SHA512

    219faa5d8154620c1cc7509f7d04f53aef103b9e7e2751506ae82489d560798979c03ce1d6f0a2937e84808172cde453020f6b7908ca2788680dac9519e7479e

  • SSDEEP

    3072:NiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoelzoxss7:NiLVCIT4WK2z1W+CUHZj4Skq/eao8oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_3fe6e715c761f87e0f72beca5c1426e054edb1d817c4b3ef4f61251ed401b87c

    • Size

      184KB

    • MD5

      f1bd5ac2e10c78d9d1680dc026512ac6

    • SHA1

      cf0dead47d5624d29ab28381363d91f54c2f5c34

    • SHA256

      3fe6e715c761f87e0f72beca5c1426e054edb1d817c4b3ef4f61251ed401b87c

    • SHA512

      219faa5d8154620c1cc7509f7d04f53aef103b9e7e2751506ae82489d560798979c03ce1d6f0a2937e84808172cde453020f6b7908ca2788680dac9519e7479e

    • SSDEEP

      3072:NiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoelzoxss7:NiLVCIT4WK2z1W+CUHZj4Skq/eao8oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks