General

  • Target

    JaffaCakes118_e62f0d3a774c8e12499afdfe8ff0298d25712b9c9a737085e7d543ee7d36d891

  • Size

    184KB

  • Sample

    241229-hq7jqawkfw

  • MD5

    60abe09b92c59df181870abb875733e2

  • SHA1

    93f5f29e49333f7a14c63797b5cccb21fa219f29

  • SHA256

    e62f0d3a774c8e12499afdfe8ff0298d25712b9c9a737085e7d543ee7d36d891

  • SHA512

    6f25aabe12cd9b0c51c58a0de2b66f7691a19b28afb1dede6c7a0aae3c3c245e7e8476774f49ee7b80e1f19e8218f04caa114770e11ea66d2583ce9372558298

  • SSDEEP

    3072:GiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoqlzoxss7:GiLVCIT4WK2z1W+CUHZj4Skq/eaogoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_e62f0d3a774c8e12499afdfe8ff0298d25712b9c9a737085e7d543ee7d36d891

    • Size

      184KB

    • MD5

      60abe09b92c59df181870abb875733e2

    • SHA1

      93f5f29e49333f7a14c63797b5cccb21fa219f29

    • SHA256

      e62f0d3a774c8e12499afdfe8ff0298d25712b9c9a737085e7d543ee7d36d891

    • SHA512

      6f25aabe12cd9b0c51c58a0de2b66f7691a19b28afb1dede6c7a0aae3c3c245e7e8476774f49ee7b80e1f19e8218f04caa114770e11ea66d2583ce9372558298

    • SSDEEP

      3072:GiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoqlzoxss7:GiLVCIT4WK2z1W+CUHZj4Skq/eaogoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks