General

  • Target

    JaffaCakes118_77f43d6f8d7264a388dae4a1761872a818ee46a3cb9dbc793b4a70ecddc03626

  • Size

    184KB

  • Sample

    241228-2xmmnsvkfr

  • MD5

    0fb7550059440e56e12e5197ffb8c341

  • SHA1

    64092f4b1324d3296584b5dff0a0ba97e19bc020

  • SHA256

    77f43d6f8d7264a388dae4a1761872a818ee46a3cb9dbc793b4a70ecddc03626

  • SHA512

    e4fda08394dfa9a0ea6400620c63d26636e075eb6fc7e9dbae45d3b02c567be301cc4251efe8f34ab33e17807f53c905ccfa69f70be2a0dbe4c3ebcc02365e4c

  • SSDEEP

    3072:siLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoylzoxss7:siLVCIT4WK2z1W+CUHZj4Skq/eao4oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_77f43d6f8d7264a388dae4a1761872a818ee46a3cb9dbc793b4a70ecddc03626

    • Size

      184KB

    • MD5

      0fb7550059440e56e12e5197ffb8c341

    • SHA1

      64092f4b1324d3296584b5dff0a0ba97e19bc020

    • SHA256

      77f43d6f8d7264a388dae4a1761872a818ee46a3cb9dbc793b4a70ecddc03626

    • SHA512

      e4fda08394dfa9a0ea6400620c63d26636e075eb6fc7e9dbae45d3b02c567be301cc4251efe8f34ab33e17807f53c905ccfa69f70be2a0dbe4c3ebcc02365e4c

    • SSDEEP

      3072:siLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoylzoxss7:siLVCIT4WK2z1W+CUHZj4Skq/eao4oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks