General

  • Target

    JaffaCakes118_239011d5832b92ff7c6121844c7fb02a787f5e1a5f08f5ad45b2c25ce58e5293

  • Size

    184KB

  • Sample

    241221-2bfl8s1qdt

  • MD5

    d5552bd570f6fbcc6bf23ca7bf36d398

  • SHA1

    89380cc1424504df1f30a0d48f5f10c180b4a5c5

  • SHA256

    239011d5832b92ff7c6121844c7fb02a787f5e1a5f08f5ad45b2c25ce58e5293

  • SHA512

    3f61d84dbe1202464c9f35bc1f1fc50f1c2aa99925fa657d0fa5ddfc1435a1fbc66e05e5d063eec94ebc93e9af46c02d507ebc36456d581fab7fc2628d9de24f

  • SSDEEP

    3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao1lzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoboC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_239011d5832b92ff7c6121844c7fb02a787f5e1a5f08f5ad45b2c25ce58e5293

    • Size

      184KB

    • MD5

      d5552bd570f6fbcc6bf23ca7bf36d398

    • SHA1

      89380cc1424504df1f30a0d48f5f10c180b4a5c5

    • SHA256

      239011d5832b92ff7c6121844c7fb02a787f5e1a5f08f5ad45b2c25ce58e5293

    • SHA512

      3f61d84dbe1202464c9f35bc1f1fc50f1c2aa99925fa657d0fa5ddfc1435a1fbc66e05e5d063eec94ebc93e9af46c02d507ebc36456d581fab7fc2628d9de24f

    • SSDEEP

      3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao1lzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoboC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks