General

  • Target

    JaffaCakes118_6d3582e86585cd6b303d8c5321d37fb3319be62556df74c3ed7ab1416fa51400

  • Size

    184KB

  • Sample

    241225-t4ftpsypbj

  • MD5

    df67643f5d98ae7bbe17ee147b172647

  • SHA1

    17542ff342208786ca82d00a710fdf3d2944f6c0

  • SHA256

    6d3582e86585cd6b303d8c5321d37fb3319be62556df74c3ed7ab1416fa51400

  • SHA512

    91bf7521074fa417f50e73675f9f9c8becc1a2cb7af1b13c8a4049a5f0dd9d3e139de4254d2b021f5b9dc9baeceaacf4b3c6e3a95cee39469162d4b92977ea0d

  • SSDEEP

    3072:+iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoclzoxss7:+iLVCIT4WK2z1W+CUHZj4Skq/eaoioC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_6d3582e86585cd6b303d8c5321d37fb3319be62556df74c3ed7ab1416fa51400

    • Size

      184KB

    • MD5

      df67643f5d98ae7bbe17ee147b172647

    • SHA1

      17542ff342208786ca82d00a710fdf3d2944f6c0

    • SHA256

      6d3582e86585cd6b303d8c5321d37fb3319be62556df74c3ed7ab1416fa51400

    • SHA512

      91bf7521074fa417f50e73675f9f9c8becc1a2cb7af1b13c8a4049a5f0dd9d3e139de4254d2b021f5b9dc9baeceaacf4b3c6e3a95cee39469162d4b92977ea0d

    • SSDEEP

      3072:+iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoclzoxss7:+iLVCIT4WK2z1W+CUHZj4Skq/eaoioC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks