General

  • Target

    JaffaCakes118_0db4ac5ec98e37cbad37c1a6b1893aacd51bb8bdd1b87538bd456acf2a752f79

  • Size

    184KB

  • Sample

    241223-18jvgstleq

  • MD5

    e4775c236a18de07887a505dcb7532a2

  • SHA1

    64588d950158dc4fe0bb33312d50a40275f31f44

  • SHA256

    0db4ac5ec98e37cbad37c1a6b1893aacd51bb8bdd1b87538bd456acf2a752f79

  • SHA512

    89974529d010d4b525d80df2acef98aa0a7d08a3e610510951708909115a23f683a35272e538c2b1b1c2d96b63985399a66c6212fd61188713ac05915920c279

  • SSDEEP

    3072:tJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jda//2uFrSc:WfYOX+wTScR/Xzku9LVwauG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_0db4ac5ec98e37cbad37c1a6b1893aacd51bb8bdd1b87538bd456acf2a752f79

    • Size

      184KB

    • MD5

      e4775c236a18de07887a505dcb7532a2

    • SHA1

      64588d950158dc4fe0bb33312d50a40275f31f44

    • SHA256

      0db4ac5ec98e37cbad37c1a6b1893aacd51bb8bdd1b87538bd456acf2a752f79

    • SHA512

      89974529d010d4b525d80df2acef98aa0a7d08a3e610510951708909115a23f683a35272e538c2b1b1c2d96b63985399a66c6212fd61188713ac05915920c279

    • SSDEEP

      3072:tJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jda//2uFrSc:WfYOX+wTScR/Xzku9LVwauG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks