General

  • Target

    JaffaCakes118_46942d9b31afb7ad89a38337b0630db697d7481ee14414bd9ba979794bb87bb5

  • Size

    184KB

  • Sample

    241226-3zdcfswjel

  • MD5

    bddd3a341ad0acff8c273d4066f46a1f

  • SHA1

    4d21fa95fa2da6abb50b5a5fcfffdece71148229

  • SHA256

    46942d9b31afb7ad89a38337b0630db697d7481ee14414bd9ba979794bb87bb5

  • SHA512

    c91352e2bb30c52896c970c367c16c55e91d9167a5d5ed661aec9099ddca9504dc2648aede861d2cc66f5cf390a610efe8717360e4330f5d1cefd0da23308922

  • SSDEEP

    3072:XiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoVlzoxss7:XiLVCIT4WK2z1W+CUHZj4Skq/eao7oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_46942d9b31afb7ad89a38337b0630db697d7481ee14414bd9ba979794bb87bb5

    • Size

      184KB

    • MD5

      bddd3a341ad0acff8c273d4066f46a1f

    • SHA1

      4d21fa95fa2da6abb50b5a5fcfffdece71148229

    • SHA256

      46942d9b31afb7ad89a38337b0630db697d7481ee14414bd9ba979794bb87bb5

    • SHA512

      c91352e2bb30c52896c970c367c16c55e91d9167a5d5ed661aec9099ddca9504dc2648aede861d2cc66f5cf390a610efe8717360e4330f5d1cefd0da23308922

    • SSDEEP

      3072:XiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoVlzoxss7:XiLVCIT4WK2z1W+CUHZj4Skq/eao7oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks