General

  • Target

    JaffaCakes118_01db961ff425f2cecc34ece5e047b89b7d80db9cf99cd5d395095f4211553df2

  • Size

    184KB

  • Sample

    241226-2w7w8atqgr

  • MD5

    41ec6e9758a0f2fb92d35cd55ee2ed07

  • SHA1

    b2fddf962757360413fd1c9b3535eea6f241d926

  • SHA256

    01db961ff425f2cecc34ece5e047b89b7d80db9cf99cd5d395095f4211553df2

  • SHA512

    70ce449318e926881f5fae66e99250dc19f2d98ae9c71730d0f2341d1e0e997c9d989765bd1c1338a645972cb9a4fee27fa5e943856399c933cda4b10b08f271

  • SSDEEP

    3072:tiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoRlzoxss7:tiLVCIT4WK2z1W+CUHZj4Skq/eaoPoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_01db961ff425f2cecc34ece5e047b89b7d80db9cf99cd5d395095f4211553df2

    • Size

      184KB

    • MD5

      41ec6e9758a0f2fb92d35cd55ee2ed07

    • SHA1

      b2fddf962757360413fd1c9b3535eea6f241d926

    • SHA256

      01db961ff425f2cecc34ece5e047b89b7d80db9cf99cd5d395095f4211553df2

    • SHA512

      70ce449318e926881f5fae66e99250dc19f2d98ae9c71730d0f2341d1e0e997c9d989765bd1c1338a645972cb9a4fee27fa5e943856399c933cda4b10b08f271

    • SSDEEP

      3072:tiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoRlzoxss7:tiLVCIT4WK2z1W+CUHZj4Skq/eaoPoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks