General

  • Target

    JaffaCakes118_915f4eb9148205c454f0020024f8fa6dbf63e56a8080a38d1c411dfb14d6ad68

  • Size

    184KB

  • Sample

    241224-bx7dzaxqfs

  • MD5

    38a16f56073c618586ba364b1b73802d

  • SHA1

    74025f2fa8fe0254db6c1266122f9ac7f1fa5c8f

  • SHA256

    915f4eb9148205c454f0020024f8fa6dbf63e56a8080a38d1c411dfb14d6ad68

  • SHA512

    aa39e4c7221460579e9e0e4bb1e1f30fd1a88e65d0c1c0f2170fa053921f2589a215a47b8073be671489cd7dbae1ea5a5c90c33fe7268aa24763beeb097ae421

  • SSDEEP

    3072:cJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8J0a//2uFrSc:hfYOX+wTScR/Xzku9LVwXuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_915f4eb9148205c454f0020024f8fa6dbf63e56a8080a38d1c411dfb14d6ad68

    • Size

      184KB

    • MD5

      38a16f56073c618586ba364b1b73802d

    • SHA1

      74025f2fa8fe0254db6c1266122f9ac7f1fa5c8f

    • SHA256

      915f4eb9148205c454f0020024f8fa6dbf63e56a8080a38d1c411dfb14d6ad68

    • SHA512

      aa39e4c7221460579e9e0e4bb1e1f30fd1a88e65d0c1c0f2170fa053921f2589a215a47b8073be671489cd7dbae1ea5a5c90c33fe7268aa24763beeb097ae421

    • SSDEEP

      3072:cJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8J0a//2uFrSc:hfYOX+wTScR/Xzku9LVwXuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks