General

  • Target

    JaffaCakes118_2d23d6248f50f452c4fc5eec7f34d66b131ca2d62d293c657ab1820f91713e32

  • Size

    184KB

  • Sample

    241227-bzlkaayjan

  • MD5

    8524e6bd37e5be19b0e59801b43587a2

  • SHA1

    4246c8a5af5791529a6795dc8d5fd47c9fe7a4d6

  • SHA256

    2d23d6248f50f452c4fc5eec7f34d66b131ca2d62d293c657ab1820f91713e32

  • SHA512

    678611c263e4a3b2266ccb3858c776507ff1e0b845986cdb4243affada6322141b66d3ea5a92f31b81f808fad377308979ba462bc1a3f4b58bf0bc3580d76d7e

  • SSDEEP

    3072:3iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao6lzoxss7:3iLVCIT4WK2z1W+CUHZj4Skq/eaoQoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_2d23d6248f50f452c4fc5eec7f34d66b131ca2d62d293c657ab1820f91713e32

    • Size

      184KB

    • MD5

      8524e6bd37e5be19b0e59801b43587a2

    • SHA1

      4246c8a5af5791529a6795dc8d5fd47c9fe7a4d6

    • SHA256

      2d23d6248f50f452c4fc5eec7f34d66b131ca2d62d293c657ab1820f91713e32

    • SHA512

      678611c263e4a3b2266ccb3858c776507ff1e0b845986cdb4243affada6322141b66d3ea5a92f31b81f808fad377308979ba462bc1a3f4b58bf0bc3580d76d7e

    • SSDEEP

      3072:3iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao6lzoxss7:3iLVCIT4WK2z1W+CUHZj4Skq/eaoQoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks