General

  • Target

    JaffaCakes118_15ecf7b133f694f23d3e6107af8591c8059b8878fbbe235eea22a48f828d0b8a

  • Size

    184KB

  • Sample

    241229-qm7pbasmg1

  • MD5

    60a5dcc76a3a2ddbc72bff9054faf440

  • SHA1

    6e36f37cc035344983170bcb9f4c15d9a539106e

  • SHA256

    15ecf7b133f694f23d3e6107af8591c8059b8878fbbe235eea22a48f828d0b8a

  • SHA512

    babc6d787167fe31e443510342eb38475a7f84e1b100a8fb9d4befe87fef6d319f5dd7ef8e80d4f1d548e0f7fd68717e756572a924d73c748968e544aee6b631

  • SSDEEP

    3072:fiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao1lzoxss7:fiLVCIT4WK2z1W+CUHZj4Skq/eaoboC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_15ecf7b133f694f23d3e6107af8591c8059b8878fbbe235eea22a48f828d0b8a

    • Size

      184KB

    • MD5

      60a5dcc76a3a2ddbc72bff9054faf440

    • SHA1

      6e36f37cc035344983170bcb9f4c15d9a539106e

    • SHA256

      15ecf7b133f694f23d3e6107af8591c8059b8878fbbe235eea22a48f828d0b8a

    • SHA512

      babc6d787167fe31e443510342eb38475a7f84e1b100a8fb9d4befe87fef6d319f5dd7ef8e80d4f1d548e0f7fd68717e756572a924d73c748968e544aee6b631

    • SSDEEP

      3072:fiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao1lzoxss7:fiLVCIT4WK2z1W+CUHZj4Skq/eaoboC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks