General

  • Target

    JaffaCakes118_d42c2de0ade473f8ae3a0090c7600174e822b24b10dd354df2a8e491b5a4e039

  • Size

    184KB

  • Sample

    241223-x6mxksymbl

  • MD5

    169c440e012f74d2d708f0eadf5c4e5f

  • SHA1

    f2cd323e105689e487c8a72fc2f72612c6a92db2

  • SHA256

    d42c2de0ade473f8ae3a0090c7600174e822b24b10dd354df2a8e491b5a4e039

  • SHA512

    d2923bee68b123ef6369a9127c69849314a5df811ea81c1146441b52f00f9164402dc0c98818531361263dbed82a3036330fb7196aa2a2d3781bafec48f5e0a9

  • SSDEEP

    3072:XiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoglzoxss7:XiLVCIT4WK2z1W+CUHZj4Skq/eaoeoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_d42c2de0ade473f8ae3a0090c7600174e822b24b10dd354df2a8e491b5a4e039

    • Size

      184KB

    • MD5

      169c440e012f74d2d708f0eadf5c4e5f

    • SHA1

      f2cd323e105689e487c8a72fc2f72612c6a92db2

    • SHA256

      d42c2de0ade473f8ae3a0090c7600174e822b24b10dd354df2a8e491b5a4e039

    • SHA512

      d2923bee68b123ef6369a9127c69849314a5df811ea81c1146441b52f00f9164402dc0c98818531361263dbed82a3036330fb7196aa2a2d3781bafec48f5e0a9

    • SSDEEP

      3072:XiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoglzoxss7:XiLVCIT4WK2z1W+CUHZj4Skq/eaoeoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks