General

  • Target

    JaffaCakes118_8782ee17b7ecee40e40b260abd5db35bcb589835218433a0022327f3c3312acf

  • Size

    184KB

  • Sample

    241229-3wkbla1kgx

  • MD5

    9fd4b626d570e5927f17dfbb89cb6a90

  • SHA1

    4177d884662e95f7b45678dd6825a6ad5e200b1f

  • SHA256

    8782ee17b7ecee40e40b260abd5db35bcb589835218433a0022327f3c3312acf

  • SHA512

    2d4b2a2e88fd61bb5158ec5f07387f4527be3ccf94c11513ce7262d882b42d2953c960c6ebe7c17f80afc73f95457c89e64e457b155bba5887e3a8e26d0772a6

  • SSDEEP

    3072:8iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoXlzoxss7:8iLVCIT4WK2z1W+CUHZj4Skq/eaoloC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_8782ee17b7ecee40e40b260abd5db35bcb589835218433a0022327f3c3312acf

    • Size

      184KB

    • MD5

      9fd4b626d570e5927f17dfbb89cb6a90

    • SHA1

      4177d884662e95f7b45678dd6825a6ad5e200b1f

    • SHA256

      8782ee17b7ecee40e40b260abd5db35bcb589835218433a0022327f3c3312acf

    • SHA512

      2d4b2a2e88fd61bb5158ec5f07387f4527be3ccf94c11513ce7262d882b42d2953c960c6ebe7c17f80afc73f95457c89e64e457b155bba5887e3a8e26d0772a6

    • SSDEEP

      3072:8iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoXlzoxss7:8iLVCIT4WK2z1W+CUHZj4Skq/eaoloC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks