General

  • Target

    JaffaCakes118_7aab80584585961ec9e63807a251513a443ec5d55a2b4c57a4afc2f8b2f49d66

  • Size

    184KB

  • Sample

    241224-acsveawlgq

  • MD5

    9ac8b501e6eaa3cea87a71fded17c3a4

  • SHA1

    3cc27fb70fcefa6f40c4184cb579b724c9c57f71

  • SHA256

    7aab80584585961ec9e63807a251513a443ec5d55a2b4c57a4afc2f8b2f49d66

  • SHA512

    31096878fcff3ec91c611f4b10cb676df4bc7b91c707915815061035a23f47736a380b70d75fbd9e855d8efdff3d9fd5d386310e5e315c8d8c28e639fbe3da8f

  • SSDEEP

    3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaollzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoroC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_7aab80584585961ec9e63807a251513a443ec5d55a2b4c57a4afc2f8b2f49d66

    • Size

      184KB

    • MD5

      9ac8b501e6eaa3cea87a71fded17c3a4

    • SHA1

      3cc27fb70fcefa6f40c4184cb579b724c9c57f71

    • SHA256

      7aab80584585961ec9e63807a251513a443ec5d55a2b4c57a4afc2f8b2f49d66

    • SHA512

      31096878fcff3ec91c611f4b10cb676df4bc7b91c707915815061035a23f47736a380b70d75fbd9e855d8efdff3d9fd5d386310e5e315c8d8c28e639fbe3da8f

    • SSDEEP

      3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaollzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoroC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks