General

  • Target

    JaffaCakes118_62fa8e17d590535bb39b76a23670d8558db25b7bf15c42d4e657fd75abebd52d

  • Size

    184KB

  • Sample

    241229-q2v9tssqdr

  • MD5

    e952fbd65d95b492ee1a1be94394569f

  • SHA1

    966fe8fdaf5897eb88237011ed8d232aef1c2eb6

  • SHA256

    62fa8e17d590535bb39b76a23670d8558db25b7bf15c42d4e657fd75abebd52d

  • SHA512

    2f7d3605e46291e6017daac2b4f3636dd6194165ae1a387877cf9278d320231afffbc84afe7902749bdf4ca02c7d3320b00d21fd4aeb6287a8deb65b89e8143e

  • SSDEEP

    3072:TiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoulzoxss7:TiLVCIT4WK2z1W+CUHZj4Skq/eaosoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_62fa8e17d590535bb39b76a23670d8558db25b7bf15c42d4e657fd75abebd52d

    • Size

      184KB

    • MD5

      e952fbd65d95b492ee1a1be94394569f

    • SHA1

      966fe8fdaf5897eb88237011ed8d232aef1c2eb6

    • SHA256

      62fa8e17d590535bb39b76a23670d8558db25b7bf15c42d4e657fd75abebd52d

    • SHA512

      2f7d3605e46291e6017daac2b4f3636dd6194165ae1a387877cf9278d320231afffbc84afe7902749bdf4ca02c7d3320b00d21fd4aeb6287a8deb65b89e8143e

    • SSDEEP

      3072:TiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoulzoxss7:TiLVCIT4WK2z1W+CUHZj4Skq/eaosoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks