General

  • Target

    JaffaCakes118_87e3908fdd1342239f0a0a9bf83a9685affc5045a7f1f048a026ad6af9e1332f

  • Size

    184KB

  • Sample

    241229-2avd1aymbv

  • MD5

    6e03c318022ae98acdbf84f3bbb1e5a3

  • SHA1

    a6b9a44b34b27919bcaa999bdff26397602d95ea

  • SHA256

    87e3908fdd1342239f0a0a9bf83a9685affc5045a7f1f048a026ad6af9e1332f

  • SHA512

    9de8d958b20087e90f9bc5496a3408cd8dee7683ec03b8323ec1c150baa0cf12da8e91ba554af3b94a3a923bf0910931bd9a8ccde6a850a3faccdb296094ab98

  • SSDEEP

    3072:5iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoVlzoxss7:5iLVCIT4WK2z1W+CUHZj4Skq/eao7oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_87e3908fdd1342239f0a0a9bf83a9685affc5045a7f1f048a026ad6af9e1332f

    • Size

      184KB

    • MD5

      6e03c318022ae98acdbf84f3bbb1e5a3

    • SHA1

      a6b9a44b34b27919bcaa999bdff26397602d95ea

    • SHA256

      87e3908fdd1342239f0a0a9bf83a9685affc5045a7f1f048a026ad6af9e1332f

    • SHA512

      9de8d958b20087e90f9bc5496a3408cd8dee7683ec03b8323ec1c150baa0cf12da8e91ba554af3b94a3a923bf0910931bd9a8ccde6a850a3faccdb296094ab98

    • SSDEEP

      3072:5iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoVlzoxss7:5iLVCIT4WK2z1W+CUHZj4Skq/eao7oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks