General

  • Target

    JaffaCakes118_f72abd3f872430313020c3ec02b2c96c3281146efb4b7b59dcbbd8631476c736

  • Size

    184KB

  • Sample

    241225-zjry5axmbp

  • MD5

    cf327298e6e17a3bae7f5c2c55fed9c2

  • SHA1

    6b0262ffc26206a2060f7b74833429f71253632f

  • SHA256

    f72abd3f872430313020c3ec02b2c96c3281146efb4b7b59dcbbd8631476c736

  • SHA512

    5b433d1a6c8c255e90f50f7e55c2521b574f364a8f14fd2b0fe05e47fb2ab1811bff8bf64f64516a3983516ef5137dd82c1de7cf1af8c3f54dfe601d07f42733

  • SSDEEP

    3072:3iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao9lzoxss7:3iLVCIT4WK2z1W+CUHZj4Skq/eaoToC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_f72abd3f872430313020c3ec02b2c96c3281146efb4b7b59dcbbd8631476c736

    • Size

      184KB

    • MD5

      cf327298e6e17a3bae7f5c2c55fed9c2

    • SHA1

      6b0262ffc26206a2060f7b74833429f71253632f

    • SHA256

      f72abd3f872430313020c3ec02b2c96c3281146efb4b7b59dcbbd8631476c736

    • SHA512

      5b433d1a6c8c255e90f50f7e55c2521b574f364a8f14fd2b0fe05e47fb2ab1811bff8bf64f64516a3983516ef5137dd82c1de7cf1af8c3f54dfe601d07f42733

    • SSDEEP

      3072:3iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao9lzoxss7:3iLVCIT4WK2z1W+CUHZj4Skq/eaoToC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks