General

  • Target

    JaffaCakes118_84a50ef083d71e2ce3426fa8d3ab661ffac453d63ffce729cdf199f108a34d7d

  • Size

    184KB

  • Sample

    241227-cn99yazjck

  • MD5

    d73904210132ff57422f69e0e8ea683d

  • SHA1

    46dcb8ba09b22687401012ec6c58a47307b3fc08

  • SHA256

    84a50ef083d71e2ce3426fa8d3ab661ffac453d63ffce729cdf199f108a34d7d

  • SHA512

    1a5dca5fc8bfea7f4ab857621cc08b620c66d6aaec79242f680adf27ca425315788ca0b8c6ea03a2b6300150ec4b3cddc8773aeadcbb07df49ad7a4aa177fff6

  • SSDEEP

    3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoTlzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoJoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_84a50ef083d71e2ce3426fa8d3ab661ffac453d63ffce729cdf199f108a34d7d

    • Size

      184KB

    • MD5

      d73904210132ff57422f69e0e8ea683d

    • SHA1

      46dcb8ba09b22687401012ec6c58a47307b3fc08

    • SHA256

      84a50ef083d71e2ce3426fa8d3ab661ffac453d63ffce729cdf199f108a34d7d

    • SHA512

      1a5dca5fc8bfea7f4ab857621cc08b620c66d6aaec79242f680adf27ca425315788ca0b8c6ea03a2b6300150ec4b3cddc8773aeadcbb07df49ad7a4aa177fff6

    • SSDEEP

      3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoTlzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoJoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks