General

  • Target

    JaffaCakes118_08d3c3e618b3d3de52011411451644ead4284f5f930ba3fbb5291717c2091b5b

  • Size

    184KB

  • Sample

    241226-wllckstmgn

  • MD5

    0bb2be885ec8f34b6a8e2ce48a072917

  • SHA1

    a68373020a7605afcc77b93d4c4eeda53b526dd4

  • SHA256

    08d3c3e618b3d3de52011411451644ead4284f5f930ba3fbb5291717c2091b5b

  • SHA512

    d2bead3d6de537ba4b513ad552883416952333df0865f544e1ba50edcccf4e16c109fa906d3283cbc2cfe5c081f28522a0b10ad10438c259b5a2a53e32c9b885

  • SSDEEP

    3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaohlzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eao/oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_08d3c3e618b3d3de52011411451644ead4284f5f930ba3fbb5291717c2091b5b

    • Size

      184KB

    • MD5

      0bb2be885ec8f34b6a8e2ce48a072917

    • SHA1

      a68373020a7605afcc77b93d4c4eeda53b526dd4

    • SHA256

      08d3c3e618b3d3de52011411451644ead4284f5f930ba3fbb5291717c2091b5b

    • SHA512

      d2bead3d6de537ba4b513ad552883416952333df0865f544e1ba50edcccf4e16c109fa906d3283cbc2cfe5c081f28522a0b10ad10438c259b5a2a53e32c9b885

    • SSDEEP

      3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaohlzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eao/oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks