General

  • Target

    JaffaCakes118_acda99c6fe8308fe4a99beb99e2f3ffdc30350671de083d85c681553cad626cd

  • Size

    184KB

  • Sample

    241229-dm9sfs1jex

  • MD5

    2036d6012c3ff9d86f86ccb3a7cf600e

  • SHA1

    c1c4441f65436465e0ddc060d60f09731ceb8710

  • SHA256

    acda99c6fe8308fe4a99beb99e2f3ffdc30350671de083d85c681553cad626cd

  • SHA512

    10bdb5828ec50f96244a5de0b81a051ca42ced61fa3504b4caa79d8637296d313078b758623189c8bcf963edf8ded0261b580024acf0cb8161cc1089882d51aa

  • SSDEEP

    3072:XiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoslzoxss7:XiLVCIT4WK2z1W+CUHZj4Skq/eaoSoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_acda99c6fe8308fe4a99beb99e2f3ffdc30350671de083d85c681553cad626cd

    • Size

      184KB

    • MD5

      2036d6012c3ff9d86f86ccb3a7cf600e

    • SHA1

      c1c4441f65436465e0ddc060d60f09731ceb8710

    • SHA256

      acda99c6fe8308fe4a99beb99e2f3ffdc30350671de083d85c681553cad626cd

    • SHA512

      10bdb5828ec50f96244a5de0b81a051ca42ced61fa3504b4caa79d8637296d313078b758623189c8bcf963edf8ded0261b580024acf0cb8161cc1089882d51aa

    • SSDEEP

      3072:XiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoslzoxss7:XiLVCIT4WK2z1W+CUHZj4Skq/eaoSoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks