General

  • Target

    JaffaCakes118_538c3217b1500667c1592c003bd1c5c4782ab9129a3e24db78966b2812bdac45

  • Size

    184KB

  • Sample

    241229-rm5ematkhy

  • MD5

    788c492c7b41f4f26b0fccb5d337845a

  • SHA1

    0595f6582d8ddcf9c209fc8de71fc2c4e5835f3d

  • SHA256

    538c3217b1500667c1592c003bd1c5c4782ab9129a3e24db78966b2812bdac45

  • SHA512

    84a19f8659fb94ba3bc42f75a0003cb3b5b4ebd7f759aa31bce91ad18700cab72c8fc38b717e7efaefea52b18baf4b99849252d5689bcb94978f9a743f378fac

  • SSDEEP

    3072:5iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoglzoxss7:5iLVCIT4WK2z1W+CUHZj4Skq/eaoeoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_538c3217b1500667c1592c003bd1c5c4782ab9129a3e24db78966b2812bdac45

    • Size

      184KB

    • MD5

      788c492c7b41f4f26b0fccb5d337845a

    • SHA1

      0595f6582d8ddcf9c209fc8de71fc2c4e5835f3d

    • SHA256

      538c3217b1500667c1592c003bd1c5c4782ab9129a3e24db78966b2812bdac45

    • SHA512

      84a19f8659fb94ba3bc42f75a0003cb3b5b4ebd7f759aa31bce91ad18700cab72c8fc38b717e7efaefea52b18baf4b99849252d5689bcb94978f9a743f378fac

    • SSDEEP

      3072:5iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoglzoxss7:5iLVCIT4WK2z1W+CUHZj4Skq/eaoeoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks