General

  • Target

    JaffaCakes118_7a557f163db6f2238cd231c0f29b294a59a22f21e013fdaeb20686ea43841163

  • Size

    184KB

  • Sample

    241230-xbfj1stjgj

  • MD5

    019d543609fbf5794b465a532fe33c94

  • SHA1

    3f7f3115e2b8162a7101aad9a4dfd95004f8dd5f

  • SHA256

    7a557f163db6f2238cd231c0f29b294a59a22f21e013fdaeb20686ea43841163

  • SHA512

    b770eefd8710af3a3b0e01f161c95d63c493bb205e0e5d438402c4a47d29c2bd16e6a2f6d223501aa1b84e5e6594c8e3718a702e7234d8b07701bef4f6257e62

  • SSDEEP

    3072:tiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao2lzoxss7:tiLVCIT4WK2z1W+CUHZj4Skq/eaokoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_7a557f163db6f2238cd231c0f29b294a59a22f21e013fdaeb20686ea43841163

    • Size

      184KB

    • MD5

      019d543609fbf5794b465a532fe33c94

    • SHA1

      3f7f3115e2b8162a7101aad9a4dfd95004f8dd5f

    • SHA256

      7a557f163db6f2238cd231c0f29b294a59a22f21e013fdaeb20686ea43841163

    • SHA512

      b770eefd8710af3a3b0e01f161c95d63c493bb205e0e5d438402c4a47d29c2bd16e6a2f6d223501aa1b84e5e6594c8e3718a702e7234d8b07701bef4f6257e62

    • SSDEEP

      3072:tiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao2lzoxss7:tiLVCIT4WK2z1W+CUHZj4Skq/eaokoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks