General

  • Target

    JaffaCakes118_5b65548cbeeec2b627340ea1ae6d95aeaddade22236b32292ef98755f0ae9eb1

  • Size

    184KB

  • Sample

    241227-bzj2fsyjam

  • MD5

    5a1b856d31a0befcb97e9bc4675ceda8

  • SHA1

    a47efb8ce8db4aa0c77a481a2cf263b061a00f45

  • SHA256

    5b65548cbeeec2b627340ea1ae6d95aeaddade22236b32292ef98755f0ae9eb1

  • SHA512

    40c8acf651f44029cd165b9c7825c0aca25dde53f76905f6794e794c38f9e84f54f1bd35f0804917e97985858c5e358883decb7a29a30fc1f4784c59406cee5d

  • SSDEEP

    3072:5iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoOlzoxss7:5iLVCIT4WK2z1W+CUHZj4Skq/eaoMoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_5b65548cbeeec2b627340ea1ae6d95aeaddade22236b32292ef98755f0ae9eb1

    • Size

      184KB

    • MD5

      5a1b856d31a0befcb97e9bc4675ceda8

    • SHA1

      a47efb8ce8db4aa0c77a481a2cf263b061a00f45

    • SHA256

      5b65548cbeeec2b627340ea1ae6d95aeaddade22236b32292ef98755f0ae9eb1

    • SHA512

      40c8acf651f44029cd165b9c7825c0aca25dde53f76905f6794e794c38f9e84f54f1bd35f0804917e97985858c5e358883decb7a29a30fc1f4784c59406cee5d

    • SSDEEP

      3072:5iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoOlzoxss7:5iLVCIT4WK2z1W+CUHZj4Skq/eaoMoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks