General

  • Target

    JaffaCakes118_8c240ef4c2b7fff75592bd320d986ce6e6382b881b681ceeff24c6657d50eeb0

  • Size

    184KB

  • Sample

    241226-vng79s1qgz

  • MD5

    ca6a669960702efad6245de78d99b623

  • SHA1

    bce6be7f6de40051472e9f87237beb0b5e423cdf

  • SHA256

    8c240ef4c2b7fff75592bd320d986ce6e6382b881b681ceeff24c6657d50eeb0

  • SHA512

    16591c2f4a1530b8b6838ecc969a9dc8146bba9da841875e0e633d17c2aefc83c4487ce0ae91419fd0fd2c6eb73dc33df2834204a98c889088d2d2b257d9f3c5

  • SSDEEP

    3072:MiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoxlzoxss7:MiLVCIT4WK2z1W+CUHZj4Skq/eaovoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_8c240ef4c2b7fff75592bd320d986ce6e6382b881b681ceeff24c6657d50eeb0

    • Size

      184KB

    • MD5

      ca6a669960702efad6245de78d99b623

    • SHA1

      bce6be7f6de40051472e9f87237beb0b5e423cdf

    • SHA256

      8c240ef4c2b7fff75592bd320d986ce6e6382b881b681ceeff24c6657d50eeb0

    • SHA512

      16591c2f4a1530b8b6838ecc969a9dc8146bba9da841875e0e633d17c2aefc83c4487ce0ae91419fd0fd2c6eb73dc33df2834204a98c889088d2d2b257d9f3c5

    • SSDEEP

      3072:MiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoxlzoxss7:MiLVCIT4WK2z1W+CUHZj4Skq/eaovoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks