General

  • Target

    JaffaCakes118_f2c7643f086ed8395826b7706012b3da7f863b6cb310cf24ad095bc7d5bf4da9

  • Size

    184KB

  • Sample

    241230-c9w97swjak

  • MD5

    f8951cc69a6c1af4022ad3220ccaed46

  • SHA1

    e64af9559f9fe0e79163a2ffdccb747ffaadf406

  • SHA256

    f2c7643f086ed8395826b7706012b3da7f863b6cb310cf24ad095bc7d5bf4da9

  • SHA512

    127e1c7a972f16d27c6b2ed70fce7ff0133fb19da8f211de4938bf76f8c3cd567462135e8eca44789d8d578d5fd939f55b400f8f6421750c7d09674832dfd9b2

  • SSDEEP

    3072:QiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoYlzoxss7:QiLVCIT4WK2z1W+CUHZj4Skq/eaoGoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_f2c7643f086ed8395826b7706012b3da7f863b6cb310cf24ad095bc7d5bf4da9

    • Size

      184KB

    • MD5

      f8951cc69a6c1af4022ad3220ccaed46

    • SHA1

      e64af9559f9fe0e79163a2ffdccb747ffaadf406

    • SHA256

      f2c7643f086ed8395826b7706012b3da7f863b6cb310cf24ad095bc7d5bf4da9

    • SHA512

      127e1c7a972f16d27c6b2ed70fce7ff0133fb19da8f211de4938bf76f8c3cd567462135e8eca44789d8d578d5fd939f55b400f8f6421750c7d09674832dfd9b2

    • SSDEEP

      3072:QiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoYlzoxss7:QiLVCIT4WK2z1W+CUHZj4Skq/eaoGoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks