General

  • Target

    JaffaCakes118_5f14e54dac2904760b5e6e222ebefb9783aade6c56503a9da83ba10b5173267b

  • Size

    184KB

  • Sample

    241230-1kb5qssqcs

  • MD5

    8aad3598b203bb7ef80526c2c3df8702

  • SHA1

    2e358bc8374f60580ee9698842a48f8f58311cbe

  • SHA256

    5f14e54dac2904760b5e6e222ebefb9783aade6c56503a9da83ba10b5173267b

  • SHA512

    43de9f748d90ab2ebf510ec8cfbc9a82b2c0cc1a43afc395f668ebc7f5fd505030f1311696bad81a3bd83fc0380e476b941fbfd8c81d350e0568db431cbc036b

  • SSDEEP

    3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao/lzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaodoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_5f14e54dac2904760b5e6e222ebefb9783aade6c56503a9da83ba10b5173267b

    • Size

      184KB

    • MD5

      8aad3598b203bb7ef80526c2c3df8702

    • SHA1

      2e358bc8374f60580ee9698842a48f8f58311cbe

    • SHA256

      5f14e54dac2904760b5e6e222ebefb9783aade6c56503a9da83ba10b5173267b

    • SHA512

      43de9f748d90ab2ebf510ec8cfbc9a82b2c0cc1a43afc395f668ebc7f5fd505030f1311696bad81a3bd83fc0380e476b941fbfd8c81d350e0568db431cbc036b

    • SSDEEP

      3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao/lzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaodoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks