General

  • Target

    JaffaCakes118_1348730a03d197fc550906c9f9b3703baadf15bee80006d8fcf4f749203e5ab5

  • Size

    184KB

  • Sample

    241230-y8y83axlfl

  • MD5

    fb02bd8860c8d3e30142c59fc330da12

  • SHA1

    630b58a06c9137b85bd9e1307e6c4240e7b23a4c

  • SHA256

    1348730a03d197fc550906c9f9b3703baadf15bee80006d8fcf4f749203e5ab5

  • SHA512

    f7552e52e213eddf41a21707da3af7a6140c8adc0d08dd8ef389076a2c0589f4227881d47c3ef2ec2523177e7aa06346ec45e437bb745fa2c44f6b351a1a4326

  • SSDEEP

    3072:fiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoolzoxss7:fiLVCIT4WK2z1W+CUHZj4Skq/eao2oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_1348730a03d197fc550906c9f9b3703baadf15bee80006d8fcf4f749203e5ab5

    • Size

      184KB

    • MD5

      fb02bd8860c8d3e30142c59fc330da12

    • SHA1

      630b58a06c9137b85bd9e1307e6c4240e7b23a4c

    • SHA256

      1348730a03d197fc550906c9f9b3703baadf15bee80006d8fcf4f749203e5ab5

    • SHA512

      f7552e52e213eddf41a21707da3af7a6140c8adc0d08dd8ef389076a2c0589f4227881d47c3ef2ec2523177e7aa06346ec45e437bb745fa2c44f6b351a1a4326

    • SSDEEP

      3072:fiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoolzoxss7:fiLVCIT4WK2z1W+CUHZj4Skq/eao2oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks