General

  • Target

    JaffaCakes118_d4b58b311e5c28f2c6ba8c7e7c2dfd8042d336a0676994f436d15540903539d4

  • Size

    184KB

  • Sample

    241227-dadjgszrbm

  • MD5

    cfeb6094df1f5b5602170f5d6240712c

  • SHA1

    1793675975502e157709f5011dcc6665e087a651

  • SHA256

    d4b58b311e5c28f2c6ba8c7e7c2dfd8042d336a0676994f436d15540903539d4

  • SHA512

    9e303737118f728225bc7e478b0dca13617c666817105af0be26734bb85110cebd61e30590d79c8db7b439770d86104048385a2a5674f5e0a0cfcceb0ee541e0

  • SSDEEP

    3072:WiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoElzoxss7:WiLVCIT4WK2z1W+CUHZj4Skq/eao6oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_d4b58b311e5c28f2c6ba8c7e7c2dfd8042d336a0676994f436d15540903539d4

    • Size

      184KB

    • MD5

      cfeb6094df1f5b5602170f5d6240712c

    • SHA1

      1793675975502e157709f5011dcc6665e087a651

    • SHA256

      d4b58b311e5c28f2c6ba8c7e7c2dfd8042d336a0676994f436d15540903539d4

    • SHA512

      9e303737118f728225bc7e478b0dca13617c666817105af0be26734bb85110cebd61e30590d79c8db7b439770d86104048385a2a5674f5e0a0cfcceb0ee541e0

    • SSDEEP

      3072:WiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoElzoxss7:WiLVCIT4WK2z1W+CUHZj4Skq/eao6oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks