General

  • Target

    JaffaCakes118_6a78827a823868a97a5fec8ea6e8459b0092419d80dce4fdbdd8dd1e3658e8e1

  • Size

    184KB

  • Sample

    241229-lvxf4ayndm

  • MD5

    369557c45bf527223dc9eaba25e20d64

  • SHA1

    ddc64afe6b65311fe60f3521d74f0cb0e976461b

  • SHA256

    6a78827a823868a97a5fec8ea6e8459b0092419d80dce4fdbdd8dd1e3658e8e1

  • SHA512

    9b42731360e591e6bc68c9255704b8ea1b2b7f154c291783a530e64ed39746d1e40f7151f751806d3676025cf54f32996220011f0229e7a0479b4b6d1f48b548

  • SSDEEP

    3072:3iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoxlzoxss7:3iLVCIT4WK2z1W+CUHZj4Skq/eaovoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_6a78827a823868a97a5fec8ea6e8459b0092419d80dce4fdbdd8dd1e3658e8e1

    • Size

      184KB

    • MD5

      369557c45bf527223dc9eaba25e20d64

    • SHA1

      ddc64afe6b65311fe60f3521d74f0cb0e976461b

    • SHA256

      6a78827a823868a97a5fec8ea6e8459b0092419d80dce4fdbdd8dd1e3658e8e1

    • SHA512

      9b42731360e591e6bc68c9255704b8ea1b2b7f154c291783a530e64ed39746d1e40f7151f751806d3676025cf54f32996220011f0229e7a0479b4b6d1f48b548

    • SSDEEP

      3072:3iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoxlzoxss7:3iLVCIT4WK2z1W+CUHZj4Skq/eaovoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks