General

  • Target

    JaffaCakes118_9a77f796b05b20a8697c4c8bcdd9ec62587958429c37ff1fd46b16f1365c8609

  • Size

    184KB

  • Sample

    241226-z1lhnszqez

  • MD5

    5872beae5dc5aff62aadfabf9a725c65

  • SHA1

    fb0914ac74ceeb2b0ddadcb5d716bd0e51b2954e

  • SHA256

    9a77f796b05b20a8697c4c8bcdd9ec62587958429c37ff1fd46b16f1365c8609

  • SHA512

    0af6c1401a8b74efc9e86e77cee1c952eb7ce7df563b50f6123ae9386eea896f6e188236e54193d5ab251f2edc11648aad37900a027090d2982ca618e41998b9

  • SSDEEP

    3072:YiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoAlzoxss7:YiLVCIT4WK2z1W+CUHZj4Skq/eao+oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_9a77f796b05b20a8697c4c8bcdd9ec62587958429c37ff1fd46b16f1365c8609

    • Size

      184KB

    • MD5

      5872beae5dc5aff62aadfabf9a725c65

    • SHA1

      fb0914ac74ceeb2b0ddadcb5d716bd0e51b2954e

    • SHA256

      9a77f796b05b20a8697c4c8bcdd9ec62587958429c37ff1fd46b16f1365c8609

    • SHA512

      0af6c1401a8b74efc9e86e77cee1c952eb7ce7df563b50f6123ae9386eea896f6e188236e54193d5ab251f2edc11648aad37900a027090d2982ca618e41998b9

    • SSDEEP

      3072:YiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoAlzoxss7:YiLVCIT4WK2z1W+CUHZj4Skq/eao+oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks