General

  • Target

    JaffaCakes118_4a70fafe0876169cd2034cc328cadb89ec56cdc652a24bef544112542c4e5ba1

  • Size

    184KB

  • Sample

    241230-wlwtbavkfv

  • MD5

    8a52020e970228f477dee38e9bd4ca22

  • SHA1

    95eaf896605a4d751523747deea5a7f14cefa02d

  • SHA256

    4a70fafe0876169cd2034cc328cadb89ec56cdc652a24bef544112542c4e5ba1

  • SHA512

    eb5f04b7501c029cd48b6dfddb816ddf690dd285be780e5b3af397b52ab6e0116a1e2672569e3895f9ca1024a0ea35d51b5c964683234df5d000f330c66ce4bd

  • SSDEEP

    3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoalzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaowoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_4a70fafe0876169cd2034cc328cadb89ec56cdc652a24bef544112542c4e5ba1

    • Size

      184KB

    • MD5

      8a52020e970228f477dee38e9bd4ca22

    • SHA1

      95eaf896605a4d751523747deea5a7f14cefa02d

    • SHA256

      4a70fafe0876169cd2034cc328cadb89ec56cdc652a24bef544112542c4e5ba1

    • SHA512

      eb5f04b7501c029cd48b6dfddb816ddf690dd285be780e5b3af397b52ab6e0116a1e2672569e3895f9ca1024a0ea35d51b5c964683234df5d000f330c66ce4bd

    • SSDEEP

      3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoalzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaowoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks