General

  • Target

    JaffaCakes118_4cea4b768fbf1b38b2c91418f9ba258c257895e2d9bcd0d0a1455bd30d876c37

  • Size

    184KB

  • Sample

    241229-jw8jmsxjfp

  • MD5

    5bc897b6d4a5869362ade546d12a643d

  • SHA1

    b9570f39d8e4e17a0d3f3a03b490541921f80205

  • SHA256

    4cea4b768fbf1b38b2c91418f9ba258c257895e2d9bcd0d0a1455bd30d876c37

  • SHA512

    aa693d00fd9d33e0ef993325e960e17c01f7512ffad2959c1b26589071ab9aedb2797fec2be6236d5f09342a531dc82389e8a43fcb0584c5904baa14e88524d0

  • SSDEEP

    3072:OiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoulzoxss7:OiLVCIT4WK2z1W+CUHZj4Skq/eaosoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_4cea4b768fbf1b38b2c91418f9ba258c257895e2d9bcd0d0a1455bd30d876c37

    • Size

      184KB

    • MD5

      5bc897b6d4a5869362ade546d12a643d

    • SHA1

      b9570f39d8e4e17a0d3f3a03b490541921f80205

    • SHA256

      4cea4b768fbf1b38b2c91418f9ba258c257895e2d9bcd0d0a1455bd30d876c37

    • SHA512

      aa693d00fd9d33e0ef993325e960e17c01f7512ffad2959c1b26589071ab9aedb2797fec2be6236d5f09342a531dc82389e8a43fcb0584c5904baa14e88524d0

    • SSDEEP

      3072:OiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoulzoxss7:OiLVCIT4WK2z1W+CUHZj4Skq/eaosoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks