General

  • Target

    JaffaCakes118_5214d38335d7d18dfe6a5b0880ce70f0358b30749b1841c01769531c05954d5b

  • Size

    184KB

  • Sample

    241229-r3fffatngp

  • MD5

    fe2d9f0d0353be6cb162d840dc82ebdb

  • SHA1

    6bccfd5ebb9cf6c1d062802c12558d5810d07f52

  • SHA256

    5214d38335d7d18dfe6a5b0880ce70f0358b30749b1841c01769531c05954d5b

  • SHA512

    cda82e2a756fa10a2daa980ab7c389f7eef5c0f655003cf6aaf3d65e8a61b8b9297f9147a340d1b7101ebb082762441753cdf7646307d004d8f177699308101f

  • SSDEEP

    3072:fiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao6lzoxss7:fiLVCIT4WK2z1W+CUHZj4Skq/eaoQoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_5214d38335d7d18dfe6a5b0880ce70f0358b30749b1841c01769531c05954d5b

    • Size

      184KB

    • MD5

      fe2d9f0d0353be6cb162d840dc82ebdb

    • SHA1

      6bccfd5ebb9cf6c1d062802c12558d5810d07f52

    • SHA256

      5214d38335d7d18dfe6a5b0880ce70f0358b30749b1841c01769531c05954d5b

    • SHA512

      cda82e2a756fa10a2daa980ab7c389f7eef5c0f655003cf6aaf3d65e8a61b8b9297f9147a340d1b7101ebb082762441753cdf7646307d004d8f177699308101f

    • SSDEEP

      3072:fiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao6lzoxss7:fiLVCIT4WK2z1W+CUHZj4Skq/eaoQoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks