General

  • Target

    JaffaCakes118_29b6738c354921a7f2b70322d7402a072cd57d517ff186462b81ebfaa2eadbc5

  • Size

    184KB

  • Sample

    241223-wg9vdawpgx

  • MD5

    82c89a0389c9f7cc3ffc1aace8893e0d

  • SHA1

    1ad183487bde754cb596ef97ca2cf51987f81a2c

  • SHA256

    29b6738c354921a7f2b70322d7402a072cd57d517ff186462b81ebfaa2eadbc5

  • SHA512

    e4001b2ec4f7fdad7ca432c8088a66d3da3705cbc423cf0214c3994b1156cc4a9fb110efcb4998c6687da8bbac584f5d8c4668baac0f2fece5fbc3dcd24e4a8e

  • SSDEEP

    3072:AiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoUlzoxss7:AiLVCIT4WK2z1W+CUHZj4Skq/eaoqoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_29b6738c354921a7f2b70322d7402a072cd57d517ff186462b81ebfaa2eadbc5

    • Size

      184KB

    • MD5

      82c89a0389c9f7cc3ffc1aace8893e0d

    • SHA1

      1ad183487bde754cb596ef97ca2cf51987f81a2c

    • SHA256

      29b6738c354921a7f2b70322d7402a072cd57d517ff186462b81ebfaa2eadbc5

    • SHA512

      e4001b2ec4f7fdad7ca432c8088a66d3da3705cbc423cf0214c3994b1156cc4a9fb110efcb4998c6687da8bbac584f5d8c4668baac0f2fece5fbc3dcd24e4a8e

    • SSDEEP

      3072:AiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoUlzoxss7:AiLVCIT4WK2z1W+CUHZj4Skq/eaoqoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks