General

  • Target

    JaffaCakes118_8848afa07378518a199fb69a2659ee48e6cab88f5c5ed63510cd9f0c68d847a7

  • Size

    184KB

  • Sample

    241226-z85lhs1kgw

  • MD5

    a760d2829e3b39704686e96138bcb913

  • SHA1

    6a2207a5d22f5186e65a06a15ea7752cf3734d72

  • SHA256

    8848afa07378518a199fb69a2659ee48e6cab88f5c5ed63510cd9f0c68d847a7

  • SHA512

    4ef61d13122d6a9fb7047b3c78434a4a9ec8974f5eb069ff645cf87252197e38d02ea2e1809f4009abef22e8b1be2decba3ad52334f0593351da10aaf32d11e0

  • SSDEEP

    3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao3lzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoFoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_8848afa07378518a199fb69a2659ee48e6cab88f5c5ed63510cd9f0c68d847a7

    • Size

      184KB

    • MD5

      a760d2829e3b39704686e96138bcb913

    • SHA1

      6a2207a5d22f5186e65a06a15ea7752cf3734d72

    • SHA256

      8848afa07378518a199fb69a2659ee48e6cab88f5c5ed63510cd9f0c68d847a7

    • SHA512

      4ef61d13122d6a9fb7047b3c78434a4a9ec8974f5eb069ff645cf87252197e38d02ea2e1809f4009abef22e8b1be2decba3ad52334f0593351da10aaf32d11e0

    • SSDEEP

      3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao3lzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoFoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks