General

  • Target

    JaffaCakes118_267641e1e3454a8fc90815b8c8a69f07b05ccab24b11a9978deae96f1a4cdd84

  • Size

    184KB

  • Sample

    241224-b8jr2symdj

  • MD5

    83b2acee9a14c0049aad2559b6d26cf3

  • SHA1

    cebbe7fcc381b38d573dcf3c091df4d754f6e768

  • SHA256

    267641e1e3454a8fc90815b8c8a69f07b05ccab24b11a9978deae96f1a4cdd84

  • SHA512

    96b9905af69f62dbef22da36bc9038ee60fdc0d1b24240ee6d95036080d39638c15eaf3768542288cbbc2ef2f91b71326b2715f06e3f7f537b20d625e90048e1

  • SSDEEP

    3072:GJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JJa//2uFrSc:vfYOX+wTScR/Xzku9LVwiuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_267641e1e3454a8fc90815b8c8a69f07b05ccab24b11a9978deae96f1a4cdd84

    • Size

      184KB

    • MD5

      83b2acee9a14c0049aad2559b6d26cf3

    • SHA1

      cebbe7fcc381b38d573dcf3c091df4d754f6e768

    • SHA256

      267641e1e3454a8fc90815b8c8a69f07b05ccab24b11a9978deae96f1a4cdd84

    • SHA512

      96b9905af69f62dbef22da36bc9038ee60fdc0d1b24240ee6d95036080d39638c15eaf3768542288cbbc2ef2f91b71326b2715f06e3f7f537b20d625e90048e1

    • SSDEEP

      3072:GJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JJa//2uFrSc:vfYOX+wTScR/Xzku9LVwiuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks