General

  • Target

    JaffaCakes118_f784f87a54c51116a9bf3f4b8e1b6e4b7ad5bdb92bca309011198c1df8b210d4

  • Size

    184KB

  • Sample

    241226-vxk1hssnap

  • MD5

    25ddc6382559e0a328a254bd3467ecb2

  • SHA1

    a8f65cca62ced7efb8b1a7617ec399976a1b56bf

  • SHA256

    f784f87a54c51116a9bf3f4b8e1b6e4b7ad5bdb92bca309011198c1df8b210d4

  • SHA512

    460141184368881b2b81fbdb7ad4d00786b8ccdeb7aa406ba2d57ce19a14aad4ce03be2db13bdc5fdde78b1312183e29241320aa611d8829edf276bf81901964

  • SSDEEP

    3072:siLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoHlzoxss7:siLVCIT4WK2z1W+CUHZj4Skq/eao1oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_f784f87a54c51116a9bf3f4b8e1b6e4b7ad5bdb92bca309011198c1df8b210d4

    • Size

      184KB

    • MD5

      25ddc6382559e0a328a254bd3467ecb2

    • SHA1

      a8f65cca62ced7efb8b1a7617ec399976a1b56bf

    • SHA256

      f784f87a54c51116a9bf3f4b8e1b6e4b7ad5bdb92bca309011198c1df8b210d4

    • SHA512

      460141184368881b2b81fbdb7ad4d00786b8ccdeb7aa406ba2d57ce19a14aad4ce03be2db13bdc5fdde78b1312183e29241320aa611d8829edf276bf81901964

    • SSDEEP

      3072:siLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoHlzoxss7:siLVCIT4WK2z1W+CUHZj4Skq/eao1oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks