General

  • Target

    JaffaCakes118_780f606e5557c92f4b2c81da4bcd2ecf444ad439d39f8857b547e262c7fbdda6

  • Size

    184KB

  • Sample

    241229-rx1jestmhv

  • MD5

    2344874f96cf7b9bfff76b00d1527e17

  • SHA1

    6d168276f061d1f55310eed3398df49aa3433a8e

  • SHA256

    780f606e5557c92f4b2c81da4bcd2ecf444ad439d39f8857b547e262c7fbdda6

  • SHA512

    801bc6f9c56febf85f486fe5221f75a753c86857ac07cde6438ed761b5c1fbf817c808c6a3589e65688f251ca4d24a9a4d35a4520a0b2a5cad0ddf04a1ccc9c9

  • SSDEEP

    3072:SiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaomlzoxss7:SiLVCIT4WK2z1W+CUHZj4Skq/eao0oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_780f606e5557c92f4b2c81da4bcd2ecf444ad439d39f8857b547e262c7fbdda6

    • Size

      184KB

    • MD5

      2344874f96cf7b9bfff76b00d1527e17

    • SHA1

      6d168276f061d1f55310eed3398df49aa3433a8e

    • SHA256

      780f606e5557c92f4b2c81da4bcd2ecf444ad439d39f8857b547e262c7fbdda6

    • SHA512

      801bc6f9c56febf85f486fe5221f75a753c86857ac07cde6438ed761b5c1fbf817c808c6a3589e65688f251ca4d24a9a4d35a4520a0b2a5cad0ddf04a1ccc9c9

    • SSDEEP

      3072:SiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaomlzoxss7:SiLVCIT4WK2z1W+CUHZj4Skq/eao0oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks