General

  • Target

    JaffaCakes118_8f9a331843b1a93befc5cd095cf5968be8d9e6d1ff73d79d7525ac851c8e2555

  • Size

    184KB

  • Sample

    241224-1lyecsykgr

  • MD5

    9491fa2e9c83fcef0ed41e77407a843f

  • SHA1

    aea0d148e4412893102474166e04eebbbbda8caf

  • SHA256

    8f9a331843b1a93befc5cd095cf5968be8d9e6d1ff73d79d7525ac851c8e2555

  • SHA512

    f2149fb7fcae0362980d26864bd959de6531151c79c175d17b6675dafd29c221df1b430f0cabd3bc24ddbcfc49431720d45dace783b81ca89f8b787a4a2a6995

  • SSDEEP

    3072:NiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoSlzoxss7:NiLVCIT4WK2z1W+CUHZj4Skq/eaoYoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_8f9a331843b1a93befc5cd095cf5968be8d9e6d1ff73d79d7525ac851c8e2555

    • Size

      184KB

    • MD5

      9491fa2e9c83fcef0ed41e77407a843f

    • SHA1

      aea0d148e4412893102474166e04eebbbbda8caf

    • SHA256

      8f9a331843b1a93befc5cd095cf5968be8d9e6d1ff73d79d7525ac851c8e2555

    • SHA512

      f2149fb7fcae0362980d26864bd959de6531151c79c175d17b6675dafd29c221df1b430f0cabd3bc24ddbcfc49431720d45dace783b81ca89f8b787a4a2a6995

    • SSDEEP

      3072:NiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoSlzoxss7:NiLVCIT4WK2z1W+CUHZj4Skq/eaoYoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks