General

  • Target

    JaffaCakes118_a9f1473c9fb20d7af51e2c65ce7fc80cf430b372e9448e5788b2ce77508e9b18

  • Size

    184KB

  • Sample

    241230-xavmjswkbv

  • MD5

    df47398c345e575c7247840902a5ebbb

  • SHA1

    07b8fb4fa24811c5e8d97c7e42d1c7c5f21ee2f6

  • SHA256

    a9f1473c9fb20d7af51e2c65ce7fc80cf430b372e9448e5788b2ce77508e9b18

  • SHA512

    7d41b84a6ab5a967721b134c4bed913b97d0801c6f51f46b61037cb5676428aa971b80a9321792233c28563f0a883ffab23781f8d8c9b98e89043138f27a5679

  • SSDEEP

    3072:TiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoolzoxss7:TiLVCIT4WK2z1W+CUHZj4Skq/eao2oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_a9f1473c9fb20d7af51e2c65ce7fc80cf430b372e9448e5788b2ce77508e9b18

    • Size

      184KB

    • MD5

      df47398c345e575c7247840902a5ebbb

    • SHA1

      07b8fb4fa24811c5e8d97c7e42d1c7c5f21ee2f6

    • SHA256

      a9f1473c9fb20d7af51e2c65ce7fc80cf430b372e9448e5788b2ce77508e9b18

    • SHA512

      7d41b84a6ab5a967721b134c4bed913b97d0801c6f51f46b61037cb5676428aa971b80a9321792233c28563f0a883ffab23781f8d8c9b98e89043138f27a5679

    • SSDEEP

      3072:TiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoolzoxss7:TiLVCIT4WK2z1W+CUHZj4Skq/eao2oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks