General

  • Target

    JaffaCakes118_1d5254aead2e33570eb4a0b8069673b05b138b7484524aba2becca4f6ab8bc17

  • Size

    184KB

  • Sample

    241230-x88xtsvpam

  • MD5

    1e4929900c02671a82026cad7fdb8545

  • SHA1

    7730f39cc0e95e5a4e94bff50cc1c3b933ae0ba2

  • SHA256

    1d5254aead2e33570eb4a0b8069673b05b138b7484524aba2becca4f6ab8bc17

  • SHA512

    8878f3b0099d0bab5f7d0ce50cbde67a7da632233a207deec922fe503fd5532254047bcb015ab86d6434304ecf06a5cd875716bf016089a78ab263c27e522041

  • SSDEEP

    3072:0iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoMlzoxss7:0iLVCIT4WK2z1W+CUHZj4Skq/eaoyoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_1d5254aead2e33570eb4a0b8069673b05b138b7484524aba2becca4f6ab8bc17

    • Size

      184KB

    • MD5

      1e4929900c02671a82026cad7fdb8545

    • SHA1

      7730f39cc0e95e5a4e94bff50cc1c3b933ae0ba2

    • SHA256

      1d5254aead2e33570eb4a0b8069673b05b138b7484524aba2becca4f6ab8bc17

    • SHA512

      8878f3b0099d0bab5f7d0ce50cbde67a7da632233a207deec922fe503fd5532254047bcb015ab86d6434304ecf06a5cd875716bf016089a78ab263c27e522041

    • SSDEEP

      3072:0iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoMlzoxss7:0iLVCIT4WK2z1W+CUHZj4Skq/eaoyoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks