General

  • Target

    JaffaCakes118_213635e0d8f63b35de2f00d96557fdd232e17d9b51b71501468de55106440d16

  • Size

    184KB

  • Sample

    241225-hz529a1ldm

  • MD5

    85993e56f0b547cffa69e942c5340415

  • SHA1

    fbf9742478c7cf493a996aadc04795a3ade8ac88

  • SHA256

    213635e0d8f63b35de2f00d96557fdd232e17d9b51b71501468de55106440d16

  • SHA512

    82bbb4d52289347d29e732270ccc6268f9d262e8cdb36b171667188df6324ea15f66afc492b8f6a8d061824bf388707ead843a6e3012227e583bdfca588672ce

  • SSDEEP

    3072:riLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao2lzoxss7:riLVCIT4WK2z1W+CUHZj4Skq/eaokoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_213635e0d8f63b35de2f00d96557fdd232e17d9b51b71501468de55106440d16

    • Size

      184KB

    • MD5

      85993e56f0b547cffa69e942c5340415

    • SHA1

      fbf9742478c7cf493a996aadc04795a3ade8ac88

    • SHA256

      213635e0d8f63b35de2f00d96557fdd232e17d9b51b71501468de55106440d16

    • SHA512

      82bbb4d52289347d29e732270ccc6268f9d262e8cdb36b171667188df6324ea15f66afc492b8f6a8d061824bf388707ead843a6e3012227e583bdfca588672ce

    • SSDEEP

      3072:riLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao2lzoxss7:riLVCIT4WK2z1W+CUHZj4Skq/eaokoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks