General

  • Target

    JaffaCakes118_acd9e4535af5018166da3e500200609d851c48eecb80af70a9378543c85c19c9

  • Size

    184KB

  • Sample

    241226-3zbtmavrfy

  • MD5

    83e5877081b6e476c9360a18d1a94e15

  • SHA1

    02648489bffb0a440def93230a6defe2c4a837f9

  • SHA256

    acd9e4535af5018166da3e500200609d851c48eecb80af70a9378543c85c19c9

  • SHA512

    dc51588e89d9cd633621a6e6cb824da93ad302d145ced71d95fa6d8909a1f87c0c5c2095db4166dff6de1acb3881b2e60ce02d98f5a5522ef43cbbfcdcb5e102

  • SSDEEP

    3072:piLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao2lzoxss7:piLVCIT4WK2z1W+CUHZj4Skq/eaokoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_acd9e4535af5018166da3e500200609d851c48eecb80af70a9378543c85c19c9

    • Size

      184KB

    • MD5

      83e5877081b6e476c9360a18d1a94e15

    • SHA1

      02648489bffb0a440def93230a6defe2c4a837f9

    • SHA256

      acd9e4535af5018166da3e500200609d851c48eecb80af70a9378543c85c19c9

    • SHA512

      dc51588e89d9cd633621a6e6cb824da93ad302d145ced71d95fa6d8909a1f87c0c5c2095db4166dff6de1acb3881b2e60ce02d98f5a5522ef43cbbfcdcb5e102

    • SSDEEP

      3072:piLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao2lzoxss7:piLVCIT4WK2z1W+CUHZj4Skq/eaokoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks