General

  • Target

    JaffaCakes118_45f54fed94e5dc19c4bd9af6f654639200fd437e70b312d0c8aa0059099bf77c

  • Size

    184KB

  • Sample

    241229-rz5adstnbj

  • MD5

    05207ea3a7d2ae3442a4d75716a28265

  • SHA1

    adfb122b5515b0309072b95c0fdfda8ccc308c9c

  • SHA256

    45f54fed94e5dc19c4bd9af6f654639200fd437e70b312d0c8aa0059099bf77c

  • SHA512

    2ffd37642a0e99c8aa44aafafd0f94ab2de398c72443c4bf1a0316d70fce9df6a30d4aba6b62d8bf8034d1aeaf7dfe4787adca98e6c1202f45ba1fa437bbe9b9

  • SSDEEP

    3072:oiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaonlzoxss7:oiLVCIT4WK2z1W+CUHZj4Skq/eaoVoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_45f54fed94e5dc19c4bd9af6f654639200fd437e70b312d0c8aa0059099bf77c

    • Size

      184KB

    • MD5

      05207ea3a7d2ae3442a4d75716a28265

    • SHA1

      adfb122b5515b0309072b95c0fdfda8ccc308c9c

    • SHA256

      45f54fed94e5dc19c4bd9af6f654639200fd437e70b312d0c8aa0059099bf77c

    • SHA512

      2ffd37642a0e99c8aa44aafafd0f94ab2de398c72443c4bf1a0316d70fce9df6a30d4aba6b62d8bf8034d1aeaf7dfe4787adca98e6c1202f45ba1fa437bbe9b9

    • SSDEEP

      3072:oiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaonlzoxss7:oiLVCIT4WK2z1W+CUHZj4Skq/eaoVoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks