General

  • Target

    JaffaCakes118_112d3e6891a0c2f5ec8ca1fe3093a5d448bfe264df1cb66536f4dbb4fe4dbdad

  • Size

    184KB

  • Sample

    241222-lkb3eatkbj

  • MD5

    74c7e449fa15879b4b01c05da736b264

  • SHA1

    745081f3a758a1c6c54700ce241450870b2cdc78

  • SHA256

    112d3e6891a0c2f5ec8ca1fe3093a5d448bfe264df1cb66536f4dbb4fe4dbdad

  • SHA512

    4f2d8c29b9b49ba8e84bea0ba9ec01369e54f3eb5442516b560cb7da233a15e79e0ebe26be045a754dd679f2568d7e063b4ea6311a6ae4966940985fef4ba848

  • SSDEEP

    3072:kiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao1lzoxss7:kiLVCIT4WK2z1W+CUHZj4Skq/eaoboC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_112d3e6891a0c2f5ec8ca1fe3093a5d448bfe264df1cb66536f4dbb4fe4dbdad

    • Size

      184KB

    • MD5

      74c7e449fa15879b4b01c05da736b264

    • SHA1

      745081f3a758a1c6c54700ce241450870b2cdc78

    • SHA256

      112d3e6891a0c2f5ec8ca1fe3093a5d448bfe264df1cb66536f4dbb4fe4dbdad

    • SHA512

      4f2d8c29b9b49ba8e84bea0ba9ec01369e54f3eb5442516b560cb7da233a15e79e0ebe26be045a754dd679f2568d7e063b4ea6311a6ae4966940985fef4ba848

    • SSDEEP

      3072:kiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao1lzoxss7:kiLVCIT4WK2z1W+CUHZj4Skq/eaoboC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks