General

  • Target

    JaffaCakes118_4a446bf5437621aa39e61045fee90d0e0b2d60fff4f9d4af2245d5603d6f10c0

  • Size

    184KB

  • Sample

    241229-bpenzsxpgy

  • MD5

    9f851b892a3d5c7d994740f6d1c227ad

  • SHA1

    074b3090d7013f3c30c24910d1137dbe6baeea50

  • SHA256

    4a446bf5437621aa39e61045fee90d0e0b2d60fff4f9d4af2245d5603d6f10c0

  • SHA512

    3207715f405fadd0f5435b7d92a6f725105056e8e0f5492a1511c44b2cb403d182d112266e1948a8d6484c3a23cd941500918eb87050043ce5d50bc15c0cd3b2

  • SSDEEP

    3072:KiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoFlzoxss7:KiLVCIT4WK2z1W+CUHZj4Skq/eaoLoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_4a446bf5437621aa39e61045fee90d0e0b2d60fff4f9d4af2245d5603d6f10c0

    • Size

      184KB

    • MD5

      9f851b892a3d5c7d994740f6d1c227ad

    • SHA1

      074b3090d7013f3c30c24910d1137dbe6baeea50

    • SHA256

      4a446bf5437621aa39e61045fee90d0e0b2d60fff4f9d4af2245d5603d6f10c0

    • SHA512

      3207715f405fadd0f5435b7d92a6f725105056e8e0f5492a1511c44b2cb403d182d112266e1948a8d6484c3a23cd941500918eb87050043ce5d50bc15c0cd3b2

    • SSDEEP

      3072:KiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoFlzoxss7:KiLVCIT4WK2z1W+CUHZj4Skq/eaoLoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks