General

  • Target

    JaffaCakes118_67f7cfef7d33b48c9acf0d5e94654786278d805f70b7030671c1fdcc2fac2a44

  • Size

    184KB

  • Sample

    241227-cjr8kayqdv

  • MD5

    4f8238d747dd7badc46f351e6f94116e

  • SHA1

    812134ca05308067543d9a5592d024a63f7275a7

  • SHA256

    67f7cfef7d33b48c9acf0d5e94654786278d805f70b7030671c1fdcc2fac2a44

  • SHA512

    f3a5309a14db85f833adb82930505ad65bf97f54824c2911d1680648bf7bf306b2a9e9265e2530069b04bed2abddd970ee5a9ae4fd721470f7194e73b4816684

  • SSDEEP

    3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoGlzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoUoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_67f7cfef7d33b48c9acf0d5e94654786278d805f70b7030671c1fdcc2fac2a44

    • Size

      184KB

    • MD5

      4f8238d747dd7badc46f351e6f94116e

    • SHA1

      812134ca05308067543d9a5592d024a63f7275a7

    • SHA256

      67f7cfef7d33b48c9acf0d5e94654786278d805f70b7030671c1fdcc2fac2a44

    • SHA512

      f3a5309a14db85f833adb82930505ad65bf97f54824c2911d1680648bf7bf306b2a9e9265e2530069b04bed2abddd970ee5a9ae4fd721470f7194e73b4816684

    • SSDEEP

      3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoGlzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoUoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks