General

  • Target

    JaffaCakes118_5335bfbc4a008956e2d04e238592ef8f051b3955668a88d658824f12e07604e6

  • Size

    184KB

  • Sample

    241225-tve6taylaq

  • MD5

    d2067b1c883e1c2883b42a6faf002a4c

  • SHA1

    64e0f9212bf7fb7afd2df811476fc04a69770f1d

  • SHA256

    5335bfbc4a008956e2d04e238592ef8f051b3955668a88d658824f12e07604e6

  • SHA512

    57f1d1bd619d05812c42648a6175beca425c17d5fc1234256aea8562b89361c6a3f3c02bb00ca640c572bc33a2d32ed6912ab3a6a1ab294def7d7309494c792d

  • SSDEEP

    3072:SiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoelzoxss7:SiLVCIT4WK2z1W+CUHZj4Skq/eao8oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_5335bfbc4a008956e2d04e238592ef8f051b3955668a88d658824f12e07604e6

    • Size

      184KB

    • MD5

      d2067b1c883e1c2883b42a6faf002a4c

    • SHA1

      64e0f9212bf7fb7afd2df811476fc04a69770f1d

    • SHA256

      5335bfbc4a008956e2d04e238592ef8f051b3955668a88d658824f12e07604e6

    • SHA512

      57f1d1bd619d05812c42648a6175beca425c17d5fc1234256aea8562b89361c6a3f3c02bb00ca640c572bc33a2d32ed6912ab3a6a1ab294def7d7309494c792d

    • SSDEEP

      3072:SiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoelzoxss7:SiLVCIT4WK2z1W+CUHZj4Skq/eao8oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks