General

  • Target

    JaffaCakes118_54f40465ba1db629072e03b5202e6ca0b656dd3efa7ca26d4d8f51daa1453282

  • Size

    184KB

  • Sample

    241230-ggshrszndx

  • MD5

    d399a04965bc61ca72819b2eaf5819f9

  • SHA1

    49135c8e8b58b570d2ad767b3f7fd38b27e79027

  • SHA256

    54f40465ba1db629072e03b5202e6ca0b656dd3efa7ca26d4d8f51daa1453282

  • SHA512

    02bc1402726360c286b43a5b2ffee4c980e69de950c2adc838efb578d93235aa8ffbadbb4b6d86a4f0438c9107f2b8ba033b65f62c29fdf4f6cd4df2473f5dd8

  • SSDEEP

    3072:diLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaozlzoxss7:diLVCIT4WK2z1W+CUHZj4Skq/eaopoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_54f40465ba1db629072e03b5202e6ca0b656dd3efa7ca26d4d8f51daa1453282

    • Size

      184KB

    • MD5

      d399a04965bc61ca72819b2eaf5819f9

    • SHA1

      49135c8e8b58b570d2ad767b3f7fd38b27e79027

    • SHA256

      54f40465ba1db629072e03b5202e6ca0b656dd3efa7ca26d4d8f51daa1453282

    • SHA512

      02bc1402726360c286b43a5b2ffee4c980e69de950c2adc838efb578d93235aa8ffbadbb4b6d86a4f0438c9107f2b8ba033b65f62c29fdf4f6cd4df2473f5dd8

    • SSDEEP

      3072:diLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaozlzoxss7:diLVCIT4WK2z1W+CUHZj4Skq/eaopoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks