General

  • Target

    JaffaCakes118_8c320ef0f224d37f64c5b4511b3b26990dad4991c84049a71ae7055f5184573e

  • Size

    184KB

  • Sample

    241229-dn88ba1jhw

  • MD5

    3ad4de6c5765bd0e24adfb92cb30af9a

  • SHA1

    e069e8edd93605f1bb2bc74fbea76c074eee1018

  • SHA256

    8c320ef0f224d37f64c5b4511b3b26990dad4991c84049a71ae7055f5184573e

  • SHA512

    f195b402bc9468f4530bdcf2afb4356c12afa76f0256b3e69c24efc957229b3fc77f16917fa667accedc5a56a9f6b0f8b22f400db9ca85d4a9569c088ed3fe6e

  • SSDEEP

    3072:fiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao5lzoxss7:fiLVCIT4WK2z1W+CUHZj4Skq/eaonoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_8c320ef0f224d37f64c5b4511b3b26990dad4991c84049a71ae7055f5184573e

    • Size

      184KB

    • MD5

      3ad4de6c5765bd0e24adfb92cb30af9a

    • SHA1

      e069e8edd93605f1bb2bc74fbea76c074eee1018

    • SHA256

      8c320ef0f224d37f64c5b4511b3b26990dad4991c84049a71ae7055f5184573e

    • SHA512

      f195b402bc9468f4530bdcf2afb4356c12afa76f0256b3e69c24efc957229b3fc77f16917fa667accedc5a56a9f6b0f8b22f400db9ca85d4a9569c088ed3fe6e

    • SSDEEP

      3072:fiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao5lzoxss7:fiLVCIT4WK2z1W+CUHZj4Skq/eaonoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks