General

  • Target

    JaffaCakes118_07a2a9639712b7e2edbc8e5099e939ed7d8c9b0bc46da0e05e6e19bd179b337f

  • Size

    184KB

  • Sample

    241222-nzq6zsxlhk

  • MD5

    b01c32ac35f045bbb0f581e0de287d44

  • SHA1

    cbc64da42aa2eb19200f05774028124de76f78bb

  • SHA256

    07a2a9639712b7e2edbc8e5099e939ed7d8c9b0bc46da0e05e6e19bd179b337f

  • SHA512

    a54ef18ce31ab6baf782d6e583086705eac3db5696b77cccaa3961992ec36cad0e8bb218a115f66f6f60d7f170f10b046585944b1492cd997be0a84b504db37b

  • SSDEEP

    3072:biLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao5lzoxss7:biLVCIT4WK2z1W+CUHZj4Skq/eaonoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_07a2a9639712b7e2edbc8e5099e939ed7d8c9b0bc46da0e05e6e19bd179b337f

    • Size

      184KB

    • MD5

      b01c32ac35f045bbb0f581e0de287d44

    • SHA1

      cbc64da42aa2eb19200f05774028124de76f78bb

    • SHA256

      07a2a9639712b7e2edbc8e5099e939ed7d8c9b0bc46da0e05e6e19bd179b337f

    • SHA512

      a54ef18ce31ab6baf782d6e583086705eac3db5696b77cccaa3961992ec36cad0e8bb218a115f66f6f60d7f170f10b046585944b1492cd997be0a84b504db37b

    • SSDEEP

      3072:biLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao5lzoxss7:biLVCIT4WK2z1W+CUHZj4Skq/eaonoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks