General

  • Target

    JaffaCakes118_6c2002d4be3063f77762900749793022f7b233a4849c0b16b810b89d32393030

  • Size

    184KB

  • Sample

    241229-d7a5ma1pbs

  • MD5

    58a933e6d50342c9dc83fc7592a35b82

  • SHA1

    be9b4146f333aafdeeb9cf7f65062adc07253616

  • SHA256

    6c2002d4be3063f77762900749793022f7b233a4849c0b16b810b89d32393030

  • SHA512

    773d4344ef72a25df7b44fc7c1e5cfe2286b964b765e5e94347abc38d6338e1bca94a5dd0c42c0518dd81ffecdb835c0d424d78b8150ffa7b1ea859f68146226

  • SSDEEP

    3072:XiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaozlzoxss7:XiLVCIT4WK2z1W+CUHZj4Skq/eaopoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_6c2002d4be3063f77762900749793022f7b233a4849c0b16b810b89d32393030

    • Size

      184KB

    • MD5

      58a933e6d50342c9dc83fc7592a35b82

    • SHA1

      be9b4146f333aafdeeb9cf7f65062adc07253616

    • SHA256

      6c2002d4be3063f77762900749793022f7b233a4849c0b16b810b89d32393030

    • SHA512

      773d4344ef72a25df7b44fc7c1e5cfe2286b964b765e5e94347abc38d6338e1bca94a5dd0c42c0518dd81ffecdb835c0d424d78b8150ffa7b1ea859f68146226

    • SSDEEP

      3072:XiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaozlzoxss7:XiLVCIT4WK2z1W+CUHZj4Skq/eaopoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks