General

  • Target

    JaffaCakes118_b1256968b17820778468869cc47e51150256977a69d1f529b3594b5b9111b881

  • Size

    184KB

  • Sample

    241225-x5p1jsvjck

  • MD5

    a20519418e50b26892b2f1ed4850d89c

  • SHA1

    fa97c7abb9277271a97c075878f6266992acc475

  • SHA256

    b1256968b17820778468869cc47e51150256977a69d1f529b3594b5b9111b881

  • SHA512

    6ef7c14347f765c5f17c3cc1528e44c71d94e29ab0eadff8a1d06e97875d34bcb0bd9ac346962ba99d24f66d68c465ea0b0ada17435dc35ebd515479a2e9aef7

  • SSDEEP

    3072:FiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoAlzoxss7:FiLVCIT4WK2z1W+CUHZj4Skq/eao+oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_b1256968b17820778468869cc47e51150256977a69d1f529b3594b5b9111b881

    • Size

      184KB

    • MD5

      a20519418e50b26892b2f1ed4850d89c

    • SHA1

      fa97c7abb9277271a97c075878f6266992acc475

    • SHA256

      b1256968b17820778468869cc47e51150256977a69d1f529b3594b5b9111b881

    • SHA512

      6ef7c14347f765c5f17c3cc1528e44c71d94e29ab0eadff8a1d06e97875d34bcb0bd9ac346962ba99d24f66d68c465ea0b0ada17435dc35ebd515479a2e9aef7

    • SSDEEP

      3072:FiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoAlzoxss7:FiLVCIT4WK2z1W+CUHZj4Skq/eao+oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks