General

  • Target

    JaffaCakes118_07d923d949cb659014cd77e5a559d61da9778df7daa28baca7711069fde74ae3

  • Size

    184KB

  • Sample

    241230-d96z3sxkc1

  • MD5

    0454ed17b2fe668e0049ae7e57eaacaa

  • SHA1

    77c5ee4ad240ede648159da448f9c2914b4aab2c

  • SHA256

    07d923d949cb659014cd77e5a559d61da9778df7daa28baca7711069fde74ae3

  • SHA512

    db5367134112aca691bbf3de30ec934d04cb647c62e1d53f37f7d3cef96b7f2737b1933adc5d514113dc9085cd884f31aec9102afd0e078f019f8424f5da7777

  • SSDEEP

    3072:niLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoPlzoxss7:niLVCIT4WK2z1W+CUHZj4Skq/eaoNoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_07d923d949cb659014cd77e5a559d61da9778df7daa28baca7711069fde74ae3

    • Size

      184KB

    • MD5

      0454ed17b2fe668e0049ae7e57eaacaa

    • SHA1

      77c5ee4ad240ede648159da448f9c2914b4aab2c

    • SHA256

      07d923d949cb659014cd77e5a559d61da9778df7daa28baca7711069fde74ae3

    • SHA512

      db5367134112aca691bbf3de30ec934d04cb647c62e1d53f37f7d3cef96b7f2737b1933adc5d514113dc9085cd884f31aec9102afd0e078f019f8424f5da7777

    • SSDEEP

      3072:niLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoPlzoxss7:niLVCIT4WK2z1W+CUHZj4Skq/eaoNoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks