General

  • Target

    JaffaCakes118_9cfbedb110953e3063570f1aafe198de235256ecc3b9211ecd9e0f71ed9e46e6

  • Size

    184KB

  • Sample

    241224-mtd4ssvpfz

  • MD5

    d2c1873d0c7e276b61aacaef03bdbf29

  • SHA1

    11f527519ff2faccfa232512980e0e46f99141ca

  • SHA256

    9cfbedb110953e3063570f1aafe198de235256ecc3b9211ecd9e0f71ed9e46e6

  • SHA512

    34b3f5a5f91a13cf5d608a152b3541dd5cac99e565148c5297f3f443afdccff8ad4b66c77f1d2afa0b835cd6eea187b4902ae452be72e54ffc3f5a16da21cbb6

  • SSDEEP

    3072:NiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao/lzoxss7:NiLVCIT4WK2z1W+CUHZj4Skq/eaodoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_9cfbedb110953e3063570f1aafe198de235256ecc3b9211ecd9e0f71ed9e46e6

    • Size

      184KB

    • MD5

      d2c1873d0c7e276b61aacaef03bdbf29

    • SHA1

      11f527519ff2faccfa232512980e0e46f99141ca

    • SHA256

      9cfbedb110953e3063570f1aafe198de235256ecc3b9211ecd9e0f71ed9e46e6

    • SHA512

      34b3f5a5f91a13cf5d608a152b3541dd5cac99e565148c5297f3f443afdccff8ad4b66c77f1d2afa0b835cd6eea187b4902ae452be72e54ffc3f5a16da21cbb6

    • SSDEEP

      3072:NiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao/lzoxss7:NiLVCIT4WK2z1W+CUHZj4Skq/eaodoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks