General

  • Target

    JaffaCakes118_35d614af1069b493a1529868dab673840092ce01e288017ee365767a9d7c2c4a

  • Size

    184KB

  • Sample

    241223-wqpwkawrdx

  • MD5

    e5efc0910ad4616af0e9cfd9fc03b9a8

  • SHA1

    37d6588da62c8107e92af54cf77de7978eb1aece

  • SHA256

    35d614af1069b493a1529868dab673840092ce01e288017ee365767a9d7c2c4a

  • SHA512

    b77d1ba7a38a4ed3883b60850c9b2749f516c43d86d7d730d77483e69b2b09658fa91e826b443edc23d26b2cb5780c9849e24f26d82862bad0c60fcc445f1826

  • SSDEEP

    3072:jJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JGa//2uFrSc:IfYOX+wTScR/Xzku9LVwBuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_35d614af1069b493a1529868dab673840092ce01e288017ee365767a9d7c2c4a

    • Size

      184KB

    • MD5

      e5efc0910ad4616af0e9cfd9fc03b9a8

    • SHA1

      37d6588da62c8107e92af54cf77de7978eb1aece

    • SHA256

      35d614af1069b493a1529868dab673840092ce01e288017ee365767a9d7c2c4a

    • SHA512

      b77d1ba7a38a4ed3883b60850c9b2749f516c43d86d7d730d77483e69b2b09658fa91e826b443edc23d26b2cb5780c9849e24f26d82862bad0c60fcc445f1826

    • SSDEEP

      3072:jJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JGa//2uFrSc:IfYOX+wTScR/Xzku9LVwBuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks