General

  • Target

    JaffaCakes118_d851ef7a0951007526c3545afa13ff8d386d5e127115543ca63446c4ba9ac278

  • Size

    184KB

  • Sample

    241229-ewjs3aslht

  • MD5

    a85dc7d529a80fee1842ed70ac5d03d8

  • SHA1

    e0e00256033a3772511a1b098481c885f735ce1f

  • SHA256

    d851ef7a0951007526c3545afa13ff8d386d5e127115543ca63446c4ba9ac278

  • SHA512

    6e297cc245b8b69ace41b78a93d2e3a3b537ff59efb747921083452b49e169fc49da16e38a8e9e8dc561a6b0e2e80632546bbe89428051d2495b01c7ec6822dc

  • SSDEEP

    3072:BiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoxlzoxss7:BiLVCIT4WK2z1W+CUHZj4Skq/eaovoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_d851ef7a0951007526c3545afa13ff8d386d5e127115543ca63446c4ba9ac278

    • Size

      184KB

    • MD5

      a85dc7d529a80fee1842ed70ac5d03d8

    • SHA1

      e0e00256033a3772511a1b098481c885f735ce1f

    • SHA256

      d851ef7a0951007526c3545afa13ff8d386d5e127115543ca63446c4ba9ac278

    • SHA512

      6e297cc245b8b69ace41b78a93d2e3a3b537ff59efb747921083452b49e169fc49da16e38a8e9e8dc561a6b0e2e80632546bbe89428051d2495b01c7ec6822dc

    • SSDEEP

      3072:BiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoxlzoxss7:BiLVCIT4WK2z1W+CUHZj4Skq/eaovoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks