General

  • Target

    JaffaCakes118_08a943eb9ae1213de996473ebbd0ce8263233de77f7891d970a9fe5416847005

  • Size

    184KB

  • Sample

    241226-tbhgtszjaz

  • MD5

    12e6d0ea55bc7a739766affb714fdd55

  • SHA1

    55834d0d3248231d75e446e6e7afe2618bef78ea

  • SHA256

    08a943eb9ae1213de996473ebbd0ce8263233de77f7891d970a9fe5416847005

  • SHA512

    eb3fb32d42b6c8b6e3327dad51d8ae8721a3dd3300d847d0efeaf6618a93f3eff25e47c4dc8e27430d941ce9d83d46c335e2e9fcbc78e4aaeaefabf89da878bb

  • SSDEEP

    3072:EiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaomlzoxss7:EiLVCIT4WK2z1W+CUHZj4Skq/eao0oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_08a943eb9ae1213de996473ebbd0ce8263233de77f7891d970a9fe5416847005

    • Size

      184KB

    • MD5

      12e6d0ea55bc7a739766affb714fdd55

    • SHA1

      55834d0d3248231d75e446e6e7afe2618bef78ea

    • SHA256

      08a943eb9ae1213de996473ebbd0ce8263233de77f7891d970a9fe5416847005

    • SHA512

      eb3fb32d42b6c8b6e3327dad51d8ae8721a3dd3300d847d0efeaf6618a93f3eff25e47c4dc8e27430d941ce9d83d46c335e2e9fcbc78e4aaeaefabf89da878bb

    • SSDEEP

      3072:EiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaomlzoxss7:EiLVCIT4WK2z1W+CUHZj4Skq/eao0oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks