General

  • Target

    JaffaCakes118_2d78a825ef9952fa97872384af8b68f022f0173f52d2f6cbb01bedae069077e5

  • Size

    184KB

  • Sample

    241224-m1zdbavres

  • MD5

    f1f93d7b9ee93db31347f3e32d6805b4

  • SHA1

    885693405f62c4936532b0b795733901912559ee

  • SHA256

    2d78a825ef9952fa97872384af8b68f022f0173f52d2f6cbb01bedae069077e5

  • SHA512

    101b7a5d185e3c4da0167b1c47309cc61690bceb40f219d9e401076845b4f9e9aa8dee876e0551e33e8aeca7817c13b4c7c440f524f2fd63059050ac10799baa

  • SSDEEP

    3072:gJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JMa//2uFrSc:dfYOX+wTScR/Xzku9LVwHuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_2d78a825ef9952fa97872384af8b68f022f0173f52d2f6cbb01bedae069077e5

    • Size

      184KB

    • MD5

      f1f93d7b9ee93db31347f3e32d6805b4

    • SHA1

      885693405f62c4936532b0b795733901912559ee

    • SHA256

      2d78a825ef9952fa97872384af8b68f022f0173f52d2f6cbb01bedae069077e5

    • SHA512

      101b7a5d185e3c4da0167b1c47309cc61690bceb40f219d9e401076845b4f9e9aa8dee876e0551e33e8aeca7817c13b4c7c440f524f2fd63059050ac10799baa

    • SSDEEP

      3072:gJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JMa//2uFrSc:dfYOX+wTScR/Xzku9LVwHuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks