General

  • Target

    JaffaCakes118_e594cd839a84824e1332eecf031ad9095161af9f1170fa751f80428d4e4d4019

  • Size

    184KB

  • Sample

    241224-2523bsznez

  • MD5

    3d27570b05e4a6fe662860ad6f27c316

  • SHA1

    a3f0a49873ff70d523d88a3004e2c5710d3f8498

  • SHA256

    e594cd839a84824e1332eecf031ad9095161af9f1170fa751f80428d4e4d4019

  • SHA512

    1ab90633cd8b329fac0e3e1c93e5bbcb45d4a812f00c50000fe41375c4e514456bc889458d6ff4713b3dac707876a3cd31ddc7f9984e71268fc8d4f8bf8edbd9

  • SSDEEP

    3072:UiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao8lzoxss7:UiLVCIT4WK2z1W+CUHZj4Skq/eaoCoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_e594cd839a84824e1332eecf031ad9095161af9f1170fa751f80428d4e4d4019

    • Size

      184KB

    • MD5

      3d27570b05e4a6fe662860ad6f27c316

    • SHA1

      a3f0a49873ff70d523d88a3004e2c5710d3f8498

    • SHA256

      e594cd839a84824e1332eecf031ad9095161af9f1170fa751f80428d4e4d4019

    • SHA512

      1ab90633cd8b329fac0e3e1c93e5bbcb45d4a812f00c50000fe41375c4e514456bc889458d6ff4713b3dac707876a3cd31ddc7f9984e71268fc8d4f8bf8edbd9

    • SSDEEP

      3072:UiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao8lzoxss7:UiLVCIT4WK2z1W+CUHZj4Skq/eaoCoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks