General

  • Target

    JaffaCakes118_9be385712045b155dd8ad069b822a82db30339e202f38151891758f5087b91ec

  • Size

    184KB

  • Sample

    241224-m1kvxsvrc1

  • MD5

    777f7bbe4b0c1b4281501a54353e071d

  • SHA1

    5bc3af3683777c2b91ebaaa8ba659b67b2e1e720

  • SHA256

    9be385712045b155dd8ad069b822a82db30339e202f38151891758f5087b91ec

  • SHA512

    1b731c318c29e26875179551cd83257680b101966eb91553668d779e8fbcf5b9c9bcb69097e50a46c51b04ebd8e5c0dbb9d9d3c134a957fbffc96574d16ecdfd

  • SSDEEP

    3072:pJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jza//2uFrSc:KfYOX+wTScR/Xzku9LVwouG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_9be385712045b155dd8ad069b822a82db30339e202f38151891758f5087b91ec

    • Size

      184KB

    • MD5

      777f7bbe4b0c1b4281501a54353e071d

    • SHA1

      5bc3af3683777c2b91ebaaa8ba659b67b2e1e720

    • SHA256

      9be385712045b155dd8ad069b822a82db30339e202f38151891758f5087b91ec

    • SHA512

      1b731c318c29e26875179551cd83257680b101966eb91553668d779e8fbcf5b9c9bcb69097e50a46c51b04ebd8e5c0dbb9d9d3c134a957fbffc96574d16ecdfd

    • SSDEEP

      3072:pJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jza//2uFrSc:KfYOX+wTScR/Xzku9LVwouG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks