General

  • Target

    JaffaCakes118_4ad71811cce9c33870c655606e98fea819fa661148887df97b6b36486d4b53e5

  • Size

    184KB

  • Sample

    241223-zeqv9szqhy

  • MD5

    fab00645be81900a93b4e728f730f671

  • SHA1

    494dd9c46009dcebbe089715d4648fb1c8ae8945

  • SHA256

    4ad71811cce9c33870c655606e98fea819fa661148887df97b6b36486d4b53e5

  • SHA512

    482c271254414a3c735bfb9cc1bbedde6712f7bddf77a973e645caa8d3df0d4d9e61fac2e5e6f0f7a3606a07c05ac4a4722f51794fcca5d21e013c780b0b0d41

  • SSDEEP

    3072:RJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JRa//2uFrSc:yfYOX+wTScR/Xzku9LVwquG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_4ad71811cce9c33870c655606e98fea819fa661148887df97b6b36486d4b53e5

    • Size

      184KB

    • MD5

      fab00645be81900a93b4e728f730f671

    • SHA1

      494dd9c46009dcebbe089715d4648fb1c8ae8945

    • SHA256

      4ad71811cce9c33870c655606e98fea819fa661148887df97b6b36486d4b53e5

    • SHA512

      482c271254414a3c735bfb9cc1bbedde6712f7bddf77a973e645caa8d3df0d4d9e61fac2e5e6f0f7a3606a07c05ac4a4722f51794fcca5d21e013c780b0b0d41

    • SSDEEP

      3072:RJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JRa//2uFrSc:yfYOX+wTScR/Xzku9LVwquG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks