General

  • Target

    JaffaCakes118_9ff2bf60a62410975988c21e710982f444af507348f467a90371b4595639047b

  • Size

    184KB

  • Sample

    241225-hyj4ds1lbj

  • MD5

    f70276c997665edbadca057ed9707e61

  • SHA1

    5381800d1d253f0851e616f813744312f4d0f7b7

  • SHA256

    9ff2bf60a62410975988c21e710982f444af507348f467a90371b4595639047b

  • SHA512

    8c696e0fbb1f6f693cc66d3bcdd8c283369e63854df5dbb0620f863581317c393e8464708403487ceca36068471d8e89cbda71a788b76f874615ad68d6e1bd9f

  • SSDEEP

    3072:GiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao3lzoxss7:GiLVCIT4WK2z1W+CUHZj4Skq/eaoFoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_9ff2bf60a62410975988c21e710982f444af507348f467a90371b4595639047b

    • Size

      184KB

    • MD5

      f70276c997665edbadca057ed9707e61

    • SHA1

      5381800d1d253f0851e616f813744312f4d0f7b7

    • SHA256

      9ff2bf60a62410975988c21e710982f444af507348f467a90371b4595639047b

    • SHA512

      8c696e0fbb1f6f693cc66d3bcdd8c283369e63854df5dbb0620f863581317c393e8464708403487ceca36068471d8e89cbda71a788b76f874615ad68d6e1bd9f

    • SSDEEP

      3072:GiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao3lzoxss7:GiLVCIT4WK2z1W+CUHZj4Skq/eaoFoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks