General

  • Target

    JaffaCakes118_32b6693a3990cd59a2ef26c898068f3f230f63939a2b9e3f7a215f549c6e628a

  • Size

    184KB

  • Sample

    241225-qlmbzstney

  • MD5

    f33f14e3919099623151ffc19ff021dc

  • SHA1

    6b53abb595132c181641bbf48c12901460892c36

  • SHA256

    32b6693a3990cd59a2ef26c898068f3f230f63939a2b9e3f7a215f549c6e628a

  • SHA512

    15e45eae8d2f630ea69462676b8302a72e8dd3936450df2e66bcc07d83b3622bffd7e08555d26da7965f7ac09f2a5515b4876e01a6397f991eb380592f658275

  • SSDEEP

    3072:siLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao9lzoxss7:siLVCIT4WK2z1W+CUHZj4Skq/eaoToC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_32b6693a3990cd59a2ef26c898068f3f230f63939a2b9e3f7a215f549c6e628a

    • Size

      184KB

    • MD5

      f33f14e3919099623151ffc19ff021dc

    • SHA1

      6b53abb595132c181641bbf48c12901460892c36

    • SHA256

      32b6693a3990cd59a2ef26c898068f3f230f63939a2b9e3f7a215f549c6e628a

    • SHA512

      15e45eae8d2f630ea69462676b8302a72e8dd3936450df2e66bcc07d83b3622bffd7e08555d26da7965f7ac09f2a5515b4876e01a6397f991eb380592f658275

    • SSDEEP

      3072:siLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao9lzoxss7:siLVCIT4WK2z1W+CUHZj4Skq/eaoToC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks