General

  • Target

    JaffaCakes118_722df5876a4d67b4de9836d3c441ba948364f48869fcfab92067c31f71a91a04

  • Size

    184KB

  • Sample

    241230-zgfs3sxpdl

  • MD5

    c8cce9e5dbdbecc7b42fbfa9d0b3c181

  • SHA1

    4094a0c72e521c9389612a79efef34f92908b882

  • SHA256

    722df5876a4d67b4de9836d3c441ba948364f48869fcfab92067c31f71a91a04

  • SHA512

    e76550ffbed2b77a5782f104304ef235c26e3bb610f28997fef6b1fcbddae09b4193899c74c18a6ef0a62460f01468c256de254ce2699172229b4b7cc1ad12fd

  • SSDEEP

    3072:UiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoNlzoxss7:UiLVCIT4WK2z1W+CUHZj4Skq/eaoDoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_722df5876a4d67b4de9836d3c441ba948364f48869fcfab92067c31f71a91a04

    • Size

      184KB

    • MD5

      c8cce9e5dbdbecc7b42fbfa9d0b3c181

    • SHA1

      4094a0c72e521c9389612a79efef34f92908b882

    • SHA256

      722df5876a4d67b4de9836d3c441ba948364f48869fcfab92067c31f71a91a04

    • SHA512

      e76550ffbed2b77a5782f104304ef235c26e3bb610f28997fef6b1fcbddae09b4193899c74c18a6ef0a62460f01468c256de254ce2699172229b4b7cc1ad12fd

    • SSDEEP

      3072:UiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoNlzoxss7:UiLVCIT4WK2z1W+CUHZj4Skq/eaoDoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks