General

  • Target

    JaffaCakes118_7b82fe49e4ac3c4fea9a13cb02c4c4c37b404b937b64582c9d791779ceac0907

  • Size

    184KB

  • Sample

    241230-gxrw6szrdj

  • MD5

    64220b8deae8ab2940c1447e09d92f27

  • SHA1

    4b9cf02c96d9b3c704d15b16de1b40b3daab221c

  • SHA256

    7b82fe49e4ac3c4fea9a13cb02c4c4c37b404b937b64582c9d791779ceac0907

  • SHA512

    d3421cace52a2be6f012bb001f4af3a4179ca7132bf8b7b265ab84b63d08f4778821efcce0198037e617a6a8b9725785816c7fad6e029e0d8ccb9efe327534e3

  • SSDEEP

    3072:DiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoPlzoxss7:DiLVCIT4WK2z1W+CUHZj4Skq/eaoNoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_7b82fe49e4ac3c4fea9a13cb02c4c4c37b404b937b64582c9d791779ceac0907

    • Size

      184KB

    • MD5

      64220b8deae8ab2940c1447e09d92f27

    • SHA1

      4b9cf02c96d9b3c704d15b16de1b40b3daab221c

    • SHA256

      7b82fe49e4ac3c4fea9a13cb02c4c4c37b404b937b64582c9d791779ceac0907

    • SHA512

      d3421cace52a2be6f012bb001f4af3a4179ca7132bf8b7b265ab84b63d08f4778821efcce0198037e617a6a8b9725785816c7fad6e029e0d8ccb9efe327534e3

    • SSDEEP

      3072:DiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoPlzoxss7:DiLVCIT4WK2z1W+CUHZj4Skq/eaoNoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks