General

  • Target

    JaffaCakes118_645b0061330acd0d087b9aebe60044ac84c3d5f3afbe9cffda3a782868987873

  • Size

    184KB

  • Sample

    241224-3my4ds1len

  • MD5

    0da3a237740c1573929ba2a18b3efcf7

  • SHA1

    9f7ee5ad2d1e81e6fd3eb331e7291d207e434821

  • SHA256

    645b0061330acd0d087b9aebe60044ac84c3d5f3afbe9cffda3a782868987873

  • SHA512

    fa30ad294eda747b4373ccd460984a634d4df0938f8e9395dc2a3fe9ed6683c779b07f88946a6223c2a318ac345d8137497929b5c2b367ca57f8bff9fed25686

  • SSDEEP

    3072:IiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoLlzoxss7:IiLVCIT4WK2z1W+CUHZj4Skq/eaoxoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_645b0061330acd0d087b9aebe60044ac84c3d5f3afbe9cffda3a782868987873

    • Size

      184KB

    • MD5

      0da3a237740c1573929ba2a18b3efcf7

    • SHA1

      9f7ee5ad2d1e81e6fd3eb331e7291d207e434821

    • SHA256

      645b0061330acd0d087b9aebe60044ac84c3d5f3afbe9cffda3a782868987873

    • SHA512

      fa30ad294eda747b4373ccd460984a634d4df0938f8e9395dc2a3fe9ed6683c779b07f88946a6223c2a318ac345d8137497929b5c2b367ca57f8bff9fed25686

    • SSDEEP

      3072:IiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoLlzoxss7:IiLVCIT4WK2z1W+CUHZj4Skq/eaoxoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks