General

  • Target

    JaffaCakes118_3fd634b09311885937074e4279cb36c22213b89475903c900c859732a40eaa03

  • Size

    184KB

  • Sample

    241226-3dsj9avlhr

  • MD5

    6d595e41a9ebae51a04446a55364b11f

  • SHA1

    6ef7f3f322b4db7154a1e67a8704ccc6a8560884

  • SHA256

    3fd634b09311885937074e4279cb36c22213b89475903c900c859732a40eaa03

  • SHA512

    20b9e5b385ce86361c18e5f6091c698091d91e42345aae4a22b3bfeb9d1c0ebc503becc313e535630281305dbc39430418ecd5fe7cf8e3b9cda149d7e85d6fb4

  • SSDEEP

    3072:5iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoglzoxss7:5iLVCIT4WK2z1W+CUHZj4Skq/eaoeoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_3fd634b09311885937074e4279cb36c22213b89475903c900c859732a40eaa03

    • Size

      184KB

    • MD5

      6d595e41a9ebae51a04446a55364b11f

    • SHA1

      6ef7f3f322b4db7154a1e67a8704ccc6a8560884

    • SHA256

      3fd634b09311885937074e4279cb36c22213b89475903c900c859732a40eaa03

    • SHA512

      20b9e5b385ce86361c18e5f6091c698091d91e42345aae4a22b3bfeb9d1c0ebc503becc313e535630281305dbc39430418ecd5fe7cf8e3b9cda149d7e85d6fb4

    • SSDEEP

      3072:5iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoglzoxss7:5iLVCIT4WK2z1W+CUHZj4Skq/eaoeoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks