General

  • Target

    JaffaCakes118_69efc9b5830e775ec8bbb8c15a49d09d140cf3eb33ecb930624fd4480711d9e8

  • Size

    184KB

  • Sample

    241224-lwsjjavkbq

  • MD5

    8821a186725aad494105f05757ed7047

  • SHA1

    2719fd5a93af76bd4819440afe46d5a327fc8430

  • SHA256

    69efc9b5830e775ec8bbb8c15a49d09d140cf3eb33ecb930624fd4480711d9e8

  • SHA512

    3c1dc00b7f35480597585984181d91412a06c55f91fcfcae9e1593f29a2c1a8f9dbb165ea8ebf3e1920cc02ca242b88dd36203b561ade3d0e335f2f5bb5f4f84

  • SSDEEP

    3072:fJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8J7a//2uFrSc:MfYOX+wTScR/Xzku9LVwUuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_69efc9b5830e775ec8bbb8c15a49d09d140cf3eb33ecb930624fd4480711d9e8

    • Size

      184KB

    • MD5

      8821a186725aad494105f05757ed7047

    • SHA1

      2719fd5a93af76bd4819440afe46d5a327fc8430

    • SHA256

      69efc9b5830e775ec8bbb8c15a49d09d140cf3eb33ecb930624fd4480711d9e8

    • SHA512

      3c1dc00b7f35480597585984181d91412a06c55f91fcfcae9e1593f29a2c1a8f9dbb165ea8ebf3e1920cc02ca242b88dd36203b561ade3d0e335f2f5bb5f4f84

    • SSDEEP

      3072:fJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8J7a//2uFrSc:MfYOX+wTScR/Xzku9LVwUuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks