General

  • Target

    JaffaCakes118_d8d982c6d73c0bf7e07055894b795ea3b250de9eb542503b8c0cdceb35376368

  • Size

    184KB

  • Sample

    241226-s7m7hsyqft

  • MD5

    003fb01a3f16cb8989e71e7a2d0f5725

  • SHA1

    36936c08fc4022ee1b949021af5fe940b4044536

  • SHA256

    d8d982c6d73c0bf7e07055894b795ea3b250de9eb542503b8c0cdceb35376368

  • SHA512

    db2e3a559a10164b4e7f1deeea6fd1b0f8861efb2a378fa5443d32da242a46d7d08a0496c4718dd54c52a5edcc4fb9392ee9f400742a04159b8b5ecf58924061

  • SSDEEP

    3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoNlzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoDoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_d8d982c6d73c0bf7e07055894b795ea3b250de9eb542503b8c0cdceb35376368

    • Size

      184KB

    • MD5

      003fb01a3f16cb8989e71e7a2d0f5725

    • SHA1

      36936c08fc4022ee1b949021af5fe940b4044536

    • SHA256

      d8d982c6d73c0bf7e07055894b795ea3b250de9eb542503b8c0cdceb35376368

    • SHA512

      db2e3a559a10164b4e7f1deeea6fd1b0f8861efb2a378fa5443d32da242a46d7d08a0496c4718dd54c52a5edcc4fb9392ee9f400742a04159b8b5ecf58924061

    • SSDEEP

      3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoNlzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoDoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks