General

  • Target

    JaffaCakes118_479ebc07933ef5f265a1453e02fe73001031fb1a869197119e74faea9effd32c

  • Size

    184KB

  • Sample

    241229-ld69zaykfl

  • MD5

    e9bd8a5fc43bd631d6b85d98e8bd4cc3

  • SHA1

    40a6c05e5cd83f569bfe77705801866025242114

  • SHA256

    479ebc07933ef5f265a1453e02fe73001031fb1a869197119e74faea9effd32c

  • SHA512

    8b5b5bac6f5e2b888a61ffe0f4b99657a1921cee39d71d3409b66d637d7dba92dcb4633d0914de6e512e51b63d0725c1e78c0bd3786f3f7244710582dc2b2c7d

  • SSDEEP

    3072:qiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoVlzoxss7:qiLVCIT4WK2z1W+CUHZj4Skq/eao7oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_479ebc07933ef5f265a1453e02fe73001031fb1a869197119e74faea9effd32c

    • Size

      184KB

    • MD5

      e9bd8a5fc43bd631d6b85d98e8bd4cc3

    • SHA1

      40a6c05e5cd83f569bfe77705801866025242114

    • SHA256

      479ebc07933ef5f265a1453e02fe73001031fb1a869197119e74faea9effd32c

    • SHA512

      8b5b5bac6f5e2b888a61ffe0f4b99657a1921cee39d71d3409b66d637d7dba92dcb4633d0914de6e512e51b63d0725c1e78c0bd3786f3f7244710582dc2b2c7d

    • SSDEEP

      3072:qiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoVlzoxss7:qiLVCIT4WK2z1W+CUHZj4Skq/eao7oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks