General

  • Target

    JaffaCakes118_0b1ef0dcb1acdd3f29ec7e4363ec21b8705f798ec61f37a49e9a0fb5444284f2

  • Size

    184KB

  • Sample

    241229-175qkaylcy

  • MD5

    ee38ae6d29b4a97003b46ad7eb43af6c

  • SHA1

    3265d4ee7a24db7a06ec723b6eda4c0a7f5ca288

  • SHA256

    0b1ef0dcb1acdd3f29ec7e4363ec21b8705f798ec61f37a49e9a0fb5444284f2

  • SHA512

    4e19cbe05d3b7e11b5add4de3cde20fb47f59a3188a231b2617f305a283985683bf8e2b88448b77715d9f1d6e1ae363373f302d2a79ccf6216a32f8239b66981

  • SSDEEP

    3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoslzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoSoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_0b1ef0dcb1acdd3f29ec7e4363ec21b8705f798ec61f37a49e9a0fb5444284f2

    • Size

      184KB

    • MD5

      ee38ae6d29b4a97003b46ad7eb43af6c

    • SHA1

      3265d4ee7a24db7a06ec723b6eda4c0a7f5ca288

    • SHA256

      0b1ef0dcb1acdd3f29ec7e4363ec21b8705f798ec61f37a49e9a0fb5444284f2

    • SHA512

      4e19cbe05d3b7e11b5add4de3cde20fb47f59a3188a231b2617f305a283985683bf8e2b88448b77715d9f1d6e1ae363373f302d2a79ccf6216a32f8239b66981

    • SSDEEP

      3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoslzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoSoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks