General

  • Target

    JaffaCakes118_1616ca0156e2c95467691b2eb458fb7a7639e2e783506f703c3bad9219d07cbd

  • Size

    184KB

  • Sample

    241222-n4nlnaxkcw

  • MD5

    5ccebbab54cd9d704d93b8b4a45a7a96

  • SHA1

    3f4bb69c9f29d13ad93d31d541600ecf624a0015

  • SHA256

    1616ca0156e2c95467691b2eb458fb7a7639e2e783506f703c3bad9219d07cbd

  • SHA512

    ca2101f378002e01c5cc37900e18926c4652e345c6dfe8ad1dde52c8248238e721ebb1962c2ce42a672b44e8e19e45f1499a8e96935d5f1471131be27892fc7d

  • SSDEEP

    3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoelzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eao8oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_1616ca0156e2c95467691b2eb458fb7a7639e2e783506f703c3bad9219d07cbd

    • Size

      184KB

    • MD5

      5ccebbab54cd9d704d93b8b4a45a7a96

    • SHA1

      3f4bb69c9f29d13ad93d31d541600ecf624a0015

    • SHA256

      1616ca0156e2c95467691b2eb458fb7a7639e2e783506f703c3bad9219d07cbd

    • SHA512

      ca2101f378002e01c5cc37900e18926c4652e345c6dfe8ad1dde52c8248238e721ebb1962c2ce42a672b44e8e19e45f1499a8e96935d5f1471131be27892fc7d

    • SSDEEP

      3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoelzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eao8oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks