General

  • Target

    JaffaCakes118_e26c5a34109d4a5cb136b9f249f74b1875930c69a8598512c4491e5ba3455375

  • Size

    184KB

  • Sample

    241225-zdkymaxkap

  • MD5

    662ab63efe8d07b4c8e86aad25334ea9

  • SHA1

    2cd300a455ce0af6014611955495ecffbdf22727

  • SHA256

    e26c5a34109d4a5cb136b9f249f74b1875930c69a8598512c4491e5ba3455375

  • SHA512

    48a189810d57fc3805736fae7f5bedc00bb9799edb8115708389cfd6f0817172ba01e06207ffd46564b05a04465ee79fd1078163e49a1650127f3d6da1c81f20

  • SSDEEP

    3072:PiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaohlzoxss7:PiLVCIT4WK2z1W+CUHZj4Skq/eao/oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_e26c5a34109d4a5cb136b9f249f74b1875930c69a8598512c4491e5ba3455375

    • Size

      184KB

    • MD5

      662ab63efe8d07b4c8e86aad25334ea9

    • SHA1

      2cd300a455ce0af6014611955495ecffbdf22727

    • SHA256

      e26c5a34109d4a5cb136b9f249f74b1875930c69a8598512c4491e5ba3455375

    • SHA512

      48a189810d57fc3805736fae7f5bedc00bb9799edb8115708389cfd6f0817172ba01e06207ffd46564b05a04465ee79fd1078163e49a1650127f3d6da1c81f20

    • SSDEEP

      3072:PiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaohlzoxss7:PiLVCIT4WK2z1W+CUHZj4Skq/eao/oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks