General

  • Target

    JaffaCakes118_c0eb53f2dade7dac9d8bd999b67d49f4204cf8579a9693c11c9f35d817879d8a

  • Size

    184KB

  • Sample

    241226-zrfaaszmer

  • MD5

    1c1f188ba258bf9bc19b3d71528a8194

  • SHA1

    dc4df5159d0281e240831915b469570296653dbd

  • SHA256

    c0eb53f2dade7dac9d8bd999b67d49f4204cf8579a9693c11c9f35d817879d8a

  • SHA512

    c17c95b31726f494ac4a06f2330aabe2a903baa8ad1c0b31974c9bfd783e5bc6a6591cb22f4ee063d18579f6f54db9def0beb653a3664fe496e1e158612f2936

  • SSDEEP

    3072:RiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaojlzoxss7:RiLVCIT4WK2z1W+CUHZj4Skq/eao5oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_c0eb53f2dade7dac9d8bd999b67d49f4204cf8579a9693c11c9f35d817879d8a

    • Size

      184KB

    • MD5

      1c1f188ba258bf9bc19b3d71528a8194

    • SHA1

      dc4df5159d0281e240831915b469570296653dbd

    • SHA256

      c0eb53f2dade7dac9d8bd999b67d49f4204cf8579a9693c11c9f35d817879d8a

    • SHA512

      c17c95b31726f494ac4a06f2330aabe2a903baa8ad1c0b31974c9bfd783e5bc6a6591cb22f4ee063d18579f6f54db9def0beb653a3664fe496e1e158612f2936

    • SSDEEP

      3072:RiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaojlzoxss7:RiLVCIT4WK2z1W+CUHZj4Skq/eao5oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks