General

  • Target

    JaffaCakes118_119edefc26d79b2304edfc9430a8d1ee427543968fa88852d06870997a895aed

  • Size

    184KB

  • Sample

    241225-v52y1azphv

  • MD5

    72fc75cd710e01f133ced8f738a59e93

  • SHA1

    68191ed40d9145fe10872d599ae449fce5cadc18

  • SHA256

    119edefc26d79b2304edfc9430a8d1ee427543968fa88852d06870997a895aed

  • SHA512

    45de8564c8a2a6f7d38812bbca3a94a0087327f5f50011b342527333f537b8324b03b72666936db9d001e426be78fb7e217229b39f082c7c869ded8dc1ea0c4f

  • SSDEEP

    3072:hiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaozlzoxss7:hiLVCIT4WK2z1W+CUHZj4Skq/eaopoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_119edefc26d79b2304edfc9430a8d1ee427543968fa88852d06870997a895aed

    • Size

      184KB

    • MD5

      72fc75cd710e01f133ced8f738a59e93

    • SHA1

      68191ed40d9145fe10872d599ae449fce5cadc18

    • SHA256

      119edefc26d79b2304edfc9430a8d1ee427543968fa88852d06870997a895aed

    • SHA512

      45de8564c8a2a6f7d38812bbca3a94a0087327f5f50011b342527333f537b8324b03b72666936db9d001e426be78fb7e217229b39f082c7c869ded8dc1ea0c4f

    • SSDEEP

      3072:hiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaozlzoxss7:hiLVCIT4WK2z1W+CUHZj4Skq/eaopoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks