General

  • Target

    JaffaCakes118_9e798048422caf88e1822215aac08a46dcc82f0327b79713db9e6c28ad47af77

  • Size

    184KB

  • Sample

    241229-ngkw9azqez

  • MD5

    bba9ee044d8c3d75d98aa9527fb51319

  • SHA1

    4d3eb18c20fb566cdf1580f5f226e44832952a44

  • SHA256

    9e798048422caf88e1822215aac08a46dcc82f0327b79713db9e6c28ad47af77

  • SHA512

    1a918e95040d88aae67c5b28fb6b5ad2c84b8f661f851458e16780473d96be2de18c515a8792c304a2f92382fbe653d554adc04271a51d0139749c4d2c001b36

  • SSDEEP

    3072:qiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaojlzoxss7:qiLVCIT4WK2z1W+CUHZj4Skq/eao5oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_9e798048422caf88e1822215aac08a46dcc82f0327b79713db9e6c28ad47af77

    • Size

      184KB

    • MD5

      bba9ee044d8c3d75d98aa9527fb51319

    • SHA1

      4d3eb18c20fb566cdf1580f5f226e44832952a44

    • SHA256

      9e798048422caf88e1822215aac08a46dcc82f0327b79713db9e6c28ad47af77

    • SHA512

      1a918e95040d88aae67c5b28fb6b5ad2c84b8f661f851458e16780473d96be2de18c515a8792c304a2f92382fbe653d554adc04271a51d0139749c4d2c001b36

    • SSDEEP

      3072:qiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaojlzoxss7:qiLVCIT4WK2z1W+CUHZj4Skq/eao5oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks