General

  • Target

    JaffaCakes118_3d301d88a14d5770b529aca82e70f483eb37a1962af64bc0aedf2a25627261c3

  • Size

    184KB

  • Sample

    241230-22gxzssqgq

  • MD5

    a0d2f51f1169f42f31b166bb3471acd3

  • SHA1

    2163df9d5c9f6755278223157548ca5539a54a3d

  • SHA256

    3d301d88a14d5770b529aca82e70f483eb37a1962af64bc0aedf2a25627261c3

  • SHA512

    39ecb3100c317425aff2d7ae5445f3927debf8a4358080910efd8eb943ac1e0f741a680aff8286d4ef82db6edc4f32bc99e51c3fc0ec331034a4bdf58736e6b6

  • SSDEEP

    3072:XiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoulzoxss7:XiLVCIT4WK2z1W+CUHZj4Skq/eaosoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_3d301d88a14d5770b529aca82e70f483eb37a1962af64bc0aedf2a25627261c3

    • Size

      184KB

    • MD5

      a0d2f51f1169f42f31b166bb3471acd3

    • SHA1

      2163df9d5c9f6755278223157548ca5539a54a3d

    • SHA256

      3d301d88a14d5770b529aca82e70f483eb37a1962af64bc0aedf2a25627261c3

    • SHA512

      39ecb3100c317425aff2d7ae5445f3927debf8a4358080910efd8eb943ac1e0f741a680aff8286d4ef82db6edc4f32bc99e51c3fc0ec331034a4bdf58736e6b6

    • SSDEEP

      3072:XiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoulzoxss7:XiLVCIT4WK2z1W+CUHZj4Skq/eaosoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks