General

  • Target

    JaffaCakes118_ecca7b9292000a93e72b16a98ca187a09596fd2aaf5d151c8b4e6b13dcff1065

  • Size

    184KB

  • Sample

    241223-1mskhasncr

  • MD5

    9b2b8d239f85b3b5c8d5d7e8db19a99f

  • SHA1

    0b9e7384d6e5e389ea989bcc6f227d7626aac80d

  • SHA256

    ecca7b9292000a93e72b16a98ca187a09596fd2aaf5d151c8b4e6b13dcff1065

  • SHA512

    4009524f040a93745fb38c2d1ae93819f05bc3b4c144c626252239a09650bef421c05ec88184fb1c3f40a98785c170571e83c9825a5227868dcfd12dd515856f

  • SSDEEP

    3072:diLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoplzoxss7:diLVCIT4WK2z1W+CUHZj4Skq/eao3oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_ecca7b9292000a93e72b16a98ca187a09596fd2aaf5d151c8b4e6b13dcff1065

    • Size

      184KB

    • MD5

      9b2b8d239f85b3b5c8d5d7e8db19a99f

    • SHA1

      0b9e7384d6e5e389ea989bcc6f227d7626aac80d

    • SHA256

      ecca7b9292000a93e72b16a98ca187a09596fd2aaf5d151c8b4e6b13dcff1065

    • SHA512

      4009524f040a93745fb38c2d1ae93819f05bc3b4c144c626252239a09650bef421c05ec88184fb1c3f40a98785c170571e83c9825a5227868dcfd12dd515856f

    • SSDEEP

      3072:diLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoplzoxss7:diLVCIT4WK2z1W+CUHZj4Skq/eao3oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks