General

  • Target

    JaffaCakes118_a5fa0f4fc94b83e5ff0a55a02e25af4842991bdfb2d0cb0168129f288060b8a3

  • Size

    184KB

  • Sample

    241224-a1pgwswrhl

  • MD5

    c9d8d3351880035f85b01b99db4486cc

  • SHA1

    e1fbb0b9479cfcca9e29853b099f82c8e11e8583

  • SHA256

    a5fa0f4fc94b83e5ff0a55a02e25af4842991bdfb2d0cb0168129f288060b8a3

  • SHA512

    04beb534973dbefcc00f76ce8f4d7f4efc3f1d93c9f263d65bb07b12e70a383c29b940cde7709629e7123c2d6a5c45345f57b5d1f056ef2c5ee851b36765ac43

  • SSDEEP

    3072:uiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoWlzoxss7:uiLVCIT4WK2z1W+CUHZj4Skq/eaoEoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_a5fa0f4fc94b83e5ff0a55a02e25af4842991bdfb2d0cb0168129f288060b8a3

    • Size

      184KB

    • MD5

      c9d8d3351880035f85b01b99db4486cc

    • SHA1

      e1fbb0b9479cfcca9e29853b099f82c8e11e8583

    • SHA256

      a5fa0f4fc94b83e5ff0a55a02e25af4842991bdfb2d0cb0168129f288060b8a3

    • SHA512

      04beb534973dbefcc00f76ce8f4d7f4efc3f1d93c9f263d65bb07b12e70a383c29b940cde7709629e7123c2d6a5c45345f57b5d1f056ef2c5ee851b36765ac43

    • SSDEEP

      3072:uiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoWlzoxss7:uiLVCIT4WK2z1W+CUHZj4Skq/eaoEoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks