General

  • Target

    JaffaCakes118_acd86e7dbdeed7165169906a9b4b4a278ec951b9fa6ee9e2881a97e4ac0f8969

  • Size

    184KB

  • Sample

    241229-2vf24szjdt

  • MD5

    0942e294b473fea84648ae2ab09d854f

  • SHA1

    2503f503f6f8bf8d5455269d36621837d911a645

  • SHA256

    acd86e7dbdeed7165169906a9b4b4a278ec951b9fa6ee9e2881a97e4ac0f8969

  • SHA512

    a3721937acbd282ecf2f859f2a3abad2209c40a5434c2517ba674ae5d438d78a020c8f59ca9ac270a7a2e1a6fdfcf692e02f061d9f2145ea89ec5cc09cb43ced

  • SSDEEP

    3072:ziLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoFlzoxss7:ziLVCIT4WK2z1W+CUHZj4Skq/eaoLoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_acd86e7dbdeed7165169906a9b4b4a278ec951b9fa6ee9e2881a97e4ac0f8969

    • Size

      184KB

    • MD5

      0942e294b473fea84648ae2ab09d854f

    • SHA1

      2503f503f6f8bf8d5455269d36621837d911a645

    • SHA256

      acd86e7dbdeed7165169906a9b4b4a278ec951b9fa6ee9e2881a97e4ac0f8969

    • SHA512

      a3721937acbd282ecf2f859f2a3abad2209c40a5434c2517ba674ae5d438d78a020c8f59ca9ac270a7a2e1a6fdfcf692e02f061d9f2145ea89ec5cc09cb43ced

    • SSDEEP

      3072:ziLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoFlzoxss7:ziLVCIT4WK2z1W+CUHZj4Skq/eaoLoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks