General

  • Target

    JaffaCakes118_78869d92d5c0e4117216d45c1fc898ea3cae059e01c1fe260d560bd17829801e

  • Size

    184KB

  • Sample

    241230-bq2j5stjhn

  • MD5

    1297b94e4e3432fcaf77644cc6bbcb93

  • SHA1

    0e2725800a6cb8cbcd73b1567f15edc14097ab92

  • SHA256

    78869d92d5c0e4117216d45c1fc898ea3cae059e01c1fe260d560bd17829801e

  • SHA512

    76d4c9a0448278002fa75683493ea169474f01dd67c6d317f1729dfd075d0cc7b3582c269cd356b51e55d92b0ccf432c3c9514d5efbe6a82a9214f4ac6cb1b3a

  • SSDEEP

    3072:siLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoMlzoxss7:siLVCIT4WK2z1W+CUHZj4Skq/eaoyoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_78869d92d5c0e4117216d45c1fc898ea3cae059e01c1fe260d560bd17829801e

    • Size

      184KB

    • MD5

      1297b94e4e3432fcaf77644cc6bbcb93

    • SHA1

      0e2725800a6cb8cbcd73b1567f15edc14097ab92

    • SHA256

      78869d92d5c0e4117216d45c1fc898ea3cae059e01c1fe260d560bd17829801e

    • SHA512

      76d4c9a0448278002fa75683493ea169474f01dd67c6d317f1729dfd075d0cc7b3582c269cd356b51e55d92b0ccf432c3c9514d5efbe6a82a9214f4ac6cb1b3a

    • SSDEEP

      3072:siLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoMlzoxss7:siLVCIT4WK2z1W+CUHZj4Skq/eaoyoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks