General

  • Target

    JaffaCakes118_a8997de9e9c00c4c6b710ba360846ab8a73e703dbceb10338574736599cea236

  • Size

    184KB

  • Sample

    241223-sewm7asqaz

  • MD5

    0a24f1a2afbb1c79b48469a634ab90e1

  • SHA1

    c4adc5fcd678f8801c296f5b0cac7c4554e3f0f2

  • SHA256

    a8997de9e9c00c4c6b710ba360846ab8a73e703dbceb10338574736599cea236

  • SHA512

    d8d78905232c4c7376a9b4bf69548368c9f4f8a26c7ad241fff12f8f7cb791799eccebdb463745cc812c62ea8e921c92e1eb50e3ed9ce57294a462df63af9123

  • SSDEEP

    3072:NiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaojlzoxss7:NiLVCIT4WK2z1W+CUHZj4Skq/eao5oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_a8997de9e9c00c4c6b710ba360846ab8a73e703dbceb10338574736599cea236

    • Size

      184KB

    • MD5

      0a24f1a2afbb1c79b48469a634ab90e1

    • SHA1

      c4adc5fcd678f8801c296f5b0cac7c4554e3f0f2

    • SHA256

      a8997de9e9c00c4c6b710ba360846ab8a73e703dbceb10338574736599cea236

    • SHA512

      d8d78905232c4c7376a9b4bf69548368c9f4f8a26c7ad241fff12f8f7cb791799eccebdb463745cc812c62ea8e921c92e1eb50e3ed9ce57294a462df63af9123

    • SSDEEP

      3072:NiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaojlzoxss7:NiLVCIT4WK2z1W+CUHZj4Skq/eao5oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks