General

  • Target

    JaffaCakes118_a9fc1b18b422d1402a36a378f2f18cff8cec822b88557785664d5170ef8c74d7

  • Size

    184KB

  • Sample

    241225-qtc4aatrdl

  • MD5

    905030a35de6aea34bcd5cbaf5a77d96

  • SHA1

    8927b0a83572d6ccee5f040ed02c55dd50f9f0f5

  • SHA256

    a9fc1b18b422d1402a36a378f2f18cff8cec822b88557785664d5170ef8c74d7

  • SHA512

    f6a4841080347ec08227174103855101b9fcbfb5a7433641eb7abdb1be80fba757842853a61deefd99e031e1a5fdcec6fb9ab82ef51c5ad0b6a8020d26770436

  • SSDEEP

    3072:YiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoxlzoxss7:YiLVCIT4WK2z1W+CUHZj4Skq/eaovoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_a9fc1b18b422d1402a36a378f2f18cff8cec822b88557785664d5170ef8c74d7

    • Size

      184KB

    • MD5

      905030a35de6aea34bcd5cbaf5a77d96

    • SHA1

      8927b0a83572d6ccee5f040ed02c55dd50f9f0f5

    • SHA256

      a9fc1b18b422d1402a36a378f2f18cff8cec822b88557785664d5170ef8c74d7

    • SHA512

      f6a4841080347ec08227174103855101b9fcbfb5a7433641eb7abdb1be80fba757842853a61deefd99e031e1a5fdcec6fb9ab82ef51c5ad0b6a8020d26770436

    • SSDEEP

      3072:YiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoxlzoxss7:YiLVCIT4WK2z1W+CUHZj4Skq/eaovoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks