General

  • Target

    JaffaCakes118_641f74013ac4bbd86d8ed12171bed50e931098aa828488e6246a96ccb9dc8ac4

  • Size

    184KB

  • Sample

    241229-3cbv4sznfz

  • MD5

    571f060a7e75bf8b603ea7130f79b1c7

  • SHA1

    94b6cf632d37b8d85353621d250deae92503f87d

  • SHA256

    641f74013ac4bbd86d8ed12171bed50e931098aa828488e6246a96ccb9dc8ac4

  • SHA512

    bdfda15176af07c5de1863f8501e1212f5c3891b0d2c0517198e336cf2f12ac544ae2ea1432c2f1b0f4dee9547162beb69bf5bfd287dde0c1db26830eaf3b167

  • SSDEEP

    3072:GiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao9lzoxss7:GiLVCIT4WK2z1W+CUHZj4Skq/eaoToC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_641f74013ac4bbd86d8ed12171bed50e931098aa828488e6246a96ccb9dc8ac4

    • Size

      184KB

    • MD5

      571f060a7e75bf8b603ea7130f79b1c7

    • SHA1

      94b6cf632d37b8d85353621d250deae92503f87d

    • SHA256

      641f74013ac4bbd86d8ed12171bed50e931098aa828488e6246a96ccb9dc8ac4

    • SHA512

      bdfda15176af07c5de1863f8501e1212f5c3891b0d2c0517198e336cf2f12ac544ae2ea1432c2f1b0f4dee9547162beb69bf5bfd287dde0c1db26830eaf3b167

    • SSDEEP

      3072:GiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao9lzoxss7:GiLVCIT4WK2z1W+CUHZj4Skq/eaoToC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks