General

  • Target

    JaffaCakes118_dfe13628894d0cb1408ef1b61da6ed7157363b6c80cb2ee18db8992c07ff183d

  • Size

    184KB

  • Sample

    241230-es9kbaxpgx

  • MD5

    f418e9db4b95e8fb186140fae903db51

  • SHA1

    a969315e54672009880839fd10c4e845adffd131

  • SHA256

    dfe13628894d0cb1408ef1b61da6ed7157363b6c80cb2ee18db8992c07ff183d

  • SHA512

    0149f24467c2c5fb63b1a4ea68575ca334d8477c269ffdd5238de06a4959635156351573c372d6b27827017c5fdc6e0595c059944183aa4faf0c4df4cfa6f941

  • SSDEEP

    3072:RiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoPlzoxss7:RiLVCIT4WK2z1W+CUHZj4Skq/eaoNoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_dfe13628894d0cb1408ef1b61da6ed7157363b6c80cb2ee18db8992c07ff183d

    • Size

      184KB

    • MD5

      f418e9db4b95e8fb186140fae903db51

    • SHA1

      a969315e54672009880839fd10c4e845adffd131

    • SHA256

      dfe13628894d0cb1408ef1b61da6ed7157363b6c80cb2ee18db8992c07ff183d

    • SHA512

      0149f24467c2c5fb63b1a4ea68575ca334d8477c269ffdd5238de06a4959635156351573c372d6b27827017c5fdc6e0595c059944183aa4faf0c4df4cfa6f941

    • SSDEEP

      3072:RiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoPlzoxss7:RiLVCIT4WK2z1W+CUHZj4Skq/eaoNoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks