General

  • Target

    JaffaCakes118_2b32c7e8439f03b7739291ed978e1055c1e43c7a3e18974e2f9155b6b2702942

  • Size

    184KB

  • Sample

    241225-q7pn8svlak

  • MD5

    329515aa88c1609fe40576e2fa9af4a0

  • SHA1

    50ed6009b01023cc01e570ef5e4ae1dc195438ae

  • SHA256

    2b32c7e8439f03b7739291ed978e1055c1e43c7a3e18974e2f9155b6b2702942

  • SHA512

    3476cb33208eafabe6e83970e624db381e5cdc133378d0f9db8cff86682d86f2a0f019129db89e122325bcbed80cd0f1a6bac4b0887ec863c37728d021e988e5

  • SSDEEP

    3072:riLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaollzoxss7:riLVCIT4WK2z1W+CUHZj4Skq/eaoroC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_2b32c7e8439f03b7739291ed978e1055c1e43c7a3e18974e2f9155b6b2702942

    • Size

      184KB

    • MD5

      329515aa88c1609fe40576e2fa9af4a0

    • SHA1

      50ed6009b01023cc01e570ef5e4ae1dc195438ae

    • SHA256

      2b32c7e8439f03b7739291ed978e1055c1e43c7a3e18974e2f9155b6b2702942

    • SHA512

      3476cb33208eafabe6e83970e624db381e5cdc133378d0f9db8cff86682d86f2a0f019129db89e122325bcbed80cd0f1a6bac4b0887ec863c37728d021e988e5

    • SSDEEP

      3072:riLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaollzoxss7:riLVCIT4WK2z1W+CUHZj4Skq/eaoroC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks