General

  • Target

    JaffaCakes118_121109032b0d0f8377c4b4cdb4382c40295267c0bcb3d709a2e86d2a8269f5ac

  • Size

    184KB

  • Sample

    241226-3zf4cawjen

  • MD5

    4e6b69140c02941247bfa54f2835e98e

  • SHA1

    4ef9983dbb29cde0a18d293f76fa7989324ef918

  • SHA256

    121109032b0d0f8377c4b4cdb4382c40295267c0bcb3d709a2e86d2a8269f5ac

  • SHA512

    7afc66949b778c772cec0af7cce082306e0e542b195cf2a5517e999007ca2cf55261c0540170ba897fe846e24762475b08a9b4ebd03cd0e4bb99b6b721b9403a

  • SSDEEP

    3072:ziLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoFlzoxss7:ziLVCIT4WK2z1W+CUHZj4Skq/eaoLoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_121109032b0d0f8377c4b4cdb4382c40295267c0bcb3d709a2e86d2a8269f5ac

    • Size

      184KB

    • MD5

      4e6b69140c02941247bfa54f2835e98e

    • SHA1

      4ef9983dbb29cde0a18d293f76fa7989324ef918

    • SHA256

      121109032b0d0f8377c4b4cdb4382c40295267c0bcb3d709a2e86d2a8269f5ac

    • SHA512

      7afc66949b778c772cec0af7cce082306e0e542b195cf2a5517e999007ca2cf55261c0540170ba897fe846e24762475b08a9b4ebd03cd0e4bb99b6b721b9403a

    • SSDEEP

      3072:ziLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoFlzoxss7:ziLVCIT4WK2z1W+CUHZj4Skq/eaoLoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks