General

  • Target

    JaffaCakes118_bb2702c6690e24b5a320413ff44f2e9d7fed923f412b370bf51eed52d3b04623

  • Size

    184KB

  • Sample

    241229-ds6mzs1ldn

  • MD5

    de812a7cd77be5c796d7888e35d3c949

  • SHA1

    12d00fd980b250fb11429cc9c4807727718b0961

  • SHA256

    bb2702c6690e24b5a320413ff44f2e9d7fed923f412b370bf51eed52d3b04623

  • SHA512

    045f7f597a9aa578e9884f6c8f22ac432d119e47d178a69c05cc771665f701ecc786c89d3f88a38faf9fb30058b56dcc893abf46f285c91376cf939e0cb3c563

  • SSDEEP

    3072:NiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaomlzoxss7:NiLVCIT4WK2z1W+CUHZj4Skq/eao0oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_bb2702c6690e24b5a320413ff44f2e9d7fed923f412b370bf51eed52d3b04623

    • Size

      184KB

    • MD5

      de812a7cd77be5c796d7888e35d3c949

    • SHA1

      12d00fd980b250fb11429cc9c4807727718b0961

    • SHA256

      bb2702c6690e24b5a320413ff44f2e9d7fed923f412b370bf51eed52d3b04623

    • SHA512

      045f7f597a9aa578e9884f6c8f22ac432d119e47d178a69c05cc771665f701ecc786c89d3f88a38faf9fb30058b56dcc893abf46f285c91376cf939e0cb3c563

    • SSDEEP

      3072:NiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaomlzoxss7:NiLVCIT4WK2z1W+CUHZj4Skq/eao0oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks