General

  • Target

    JaffaCakes118_9d1368957a01cfb32db1cd96c793749b99fae2715f9c49aeff1d21dd3eda5406

  • Size

    184KB

  • Sample

    241230-2b1bms1qcl

  • MD5

    ea232938bc5d292af6aeee7c041fef95

  • SHA1

    83eb7c71b4913098e9f6e9511d67530b411faa09

  • SHA256

    9d1368957a01cfb32db1cd96c793749b99fae2715f9c49aeff1d21dd3eda5406

  • SHA512

    d80c6b8e60262e197b222d262411f1e5a53caf566b627846ee1e8f8b9d9739cbe87edcef2414b74f168f21d71dce61fab60d742af7ac5011abd0f0b8e83329c8

  • SSDEEP

    3072:NiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaomlzoxss7:NiLVCIT4WK2z1W+CUHZj4Skq/eao0oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_9d1368957a01cfb32db1cd96c793749b99fae2715f9c49aeff1d21dd3eda5406

    • Size

      184KB

    • MD5

      ea232938bc5d292af6aeee7c041fef95

    • SHA1

      83eb7c71b4913098e9f6e9511d67530b411faa09

    • SHA256

      9d1368957a01cfb32db1cd96c793749b99fae2715f9c49aeff1d21dd3eda5406

    • SHA512

      d80c6b8e60262e197b222d262411f1e5a53caf566b627846ee1e8f8b9d9739cbe87edcef2414b74f168f21d71dce61fab60d742af7ac5011abd0f0b8e83329c8

    • SSDEEP

      3072:NiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaomlzoxss7:NiLVCIT4WK2z1W+CUHZj4Skq/eao0oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks