General

  • Target

    JaffaCakes118_e628d950ce1193564e279e283300f8e66fe4bcbd9f183aab6b6227719a26342a

  • Size

    184KB

  • Sample

    241223-3cqdhavlcv

  • MD5

    138bc70ef0f855da04744d1f563d2f8b

  • SHA1

    6d703c5004019258bd5fd20ec081f4d7c811731d

  • SHA256

    e628d950ce1193564e279e283300f8e66fe4bcbd9f183aab6b6227719a26342a

  • SHA512

    1056088ae4d1edc605541ae1cfecf6adb4451fc4edf7e75010a13d3495f3d2356ad99c4106a89bfe2819978711271d0ed6bb9ef7491c45036e2b0e6c6ef5c14f

  • SSDEEP

    3072:/JQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jia//2uFrSc:sfYOX+wTScR/Xzku9LVwFuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_e628d950ce1193564e279e283300f8e66fe4bcbd9f183aab6b6227719a26342a

    • Size

      184KB

    • MD5

      138bc70ef0f855da04744d1f563d2f8b

    • SHA1

      6d703c5004019258bd5fd20ec081f4d7c811731d

    • SHA256

      e628d950ce1193564e279e283300f8e66fe4bcbd9f183aab6b6227719a26342a

    • SHA512

      1056088ae4d1edc605541ae1cfecf6adb4451fc4edf7e75010a13d3495f3d2356ad99c4106a89bfe2819978711271d0ed6bb9ef7491c45036e2b0e6c6ef5c14f

    • SSDEEP

      3072:/JQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jia//2uFrSc:sfYOX+wTScR/Xzku9LVwFuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks