General

  • Target

    JaffaCakes118_035dc41ed4727093bff70262e3008a042f5f682e5b8d5cc81ed23119214c9ff1

  • Size

    184KB

  • Sample

    241225-qk3mkstndx

  • MD5

    2010c2f60eaa9c29fc029644c7f97703

  • SHA1

    89671c80d2a0fc09636e6d2571cc7beed0479288

  • SHA256

    035dc41ed4727093bff70262e3008a042f5f682e5b8d5cc81ed23119214c9ff1

  • SHA512

    3cce9a03d4d8ecb798a5be4802fe5a4affc7da711461af743695618bd2bea470ad55d2670b126f66c25b36489817dc8c8cc3cad08153b6a92084e247ff527d02

  • SSDEEP

    3072:jiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoHlzoxss7:jiLVCIT4WK2z1W+CUHZj4Skq/eao1oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_035dc41ed4727093bff70262e3008a042f5f682e5b8d5cc81ed23119214c9ff1

    • Size

      184KB

    • MD5

      2010c2f60eaa9c29fc029644c7f97703

    • SHA1

      89671c80d2a0fc09636e6d2571cc7beed0479288

    • SHA256

      035dc41ed4727093bff70262e3008a042f5f682e5b8d5cc81ed23119214c9ff1

    • SHA512

      3cce9a03d4d8ecb798a5be4802fe5a4affc7da711461af743695618bd2bea470ad55d2670b126f66c25b36489817dc8c8cc3cad08153b6a92084e247ff527d02

    • SSDEEP

      3072:jiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoHlzoxss7:jiLVCIT4WK2z1W+CUHZj4Skq/eao1oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks