General

  • Target

    JaffaCakes118_7aa77c882508574d7cc4ebd010608390dc5d6afaabbd6d7b865682c47ee57386

  • Size

    184KB

  • Sample

    241230-d4ezeawrhp

  • MD5

    4d850158c5f5f398a3c5aa4ad9ac99c5

  • SHA1

    d22ed80b0a6cb5bd99db4a18ed43c5229358935b

  • SHA256

    7aa77c882508574d7cc4ebd010608390dc5d6afaabbd6d7b865682c47ee57386

  • SHA512

    36ac831419a23a1214885732f2252dfca29f0f27901881a369335619ea6d4b8ccc55085da1c5c900ea5154c24d324cd857a1a247172f48e9f872224c95b9c5c1

  • SSDEEP

    3072:PiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao+lzoxss7:PiLVCIT4WK2z1W+CUHZj4Skq/eaocoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_7aa77c882508574d7cc4ebd010608390dc5d6afaabbd6d7b865682c47ee57386

    • Size

      184KB

    • MD5

      4d850158c5f5f398a3c5aa4ad9ac99c5

    • SHA1

      d22ed80b0a6cb5bd99db4a18ed43c5229358935b

    • SHA256

      7aa77c882508574d7cc4ebd010608390dc5d6afaabbd6d7b865682c47ee57386

    • SHA512

      36ac831419a23a1214885732f2252dfca29f0f27901881a369335619ea6d4b8ccc55085da1c5c900ea5154c24d324cd857a1a247172f48e9f872224c95b9c5c1

    • SSDEEP

      3072:PiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao+lzoxss7:PiLVCIT4WK2z1W+CUHZj4Skq/eaocoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks