General

  • Target

    JaffaCakes118_fa585f8931f9b5b5efb79da5e6c54aba2a6b38dc0cda38f9a6725294033aecd0

  • Size

    184KB

  • Sample

    241230-a9wybssmcl

  • MD5

    beb3d8cd6e7fd469b84ec8c132ac99c9

  • SHA1

    65896d856b483108a6a7a05e1f4885930239364c

  • SHA256

    fa585f8931f9b5b5efb79da5e6c54aba2a6b38dc0cda38f9a6725294033aecd0

  • SHA512

    742de5215885f8d353562426af435e69bb825a6c14ddfc6ab318f83fb8f406359c871b89fca030e05293150b7623b5febda92a6f49124c813ae788a5b2511a7b

  • SSDEEP

    3072:TiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaozlzoxss7:TiLVCIT4WK2z1W+CUHZj4Skq/eaopoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_fa585f8931f9b5b5efb79da5e6c54aba2a6b38dc0cda38f9a6725294033aecd0

    • Size

      184KB

    • MD5

      beb3d8cd6e7fd469b84ec8c132ac99c9

    • SHA1

      65896d856b483108a6a7a05e1f4885930239364c

    • SHA256

      fa585f8931f9b5b5efb79da5e6c54aba2a6b38dc0cda38f9a6725294033aecd0

    • SHA512

      742de5215885f8d353562426af435e69bb825a6c14ddfc6ab318f83fb8f406359c871b89fca030e05293150b7623b5febda92a6f49124c813ae788a5b2511a7b

    • SSDEEP

      3072:TiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaozlzoxss7:TiLVCIT4WK2z1W+CUHZj4Skq/eaopoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks