General

  • Target

    JaffaCakes118_c3a0330fb2ff2b6e8698cd05b2fb76473380178358dd3eb4739ed28a32a0697f

  • Size

    184KB

  • Sample

    241224-rxexqazlhn

  • MD5

    9821be2a9482d8da5269c7030077023d

  • SHA1

    27fa113046f0047f30dfa6b7ff9806e8d822ea17

  • SHA256

    c3a0330fb2ff2b6e8698cd05b2fb76473380178358dd3eb4739ed28a32a0697f

  • SHA512

    79a1bbe7edc3ed97c04f61b5980c0878cfa5cf329798ddc384a42dad1c3025385d037372ac9a891027fce31087a3ad36c0367889f1d5941a3c6414650c8ef375

  • SSDEEP

    3072:SiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoblzoxss7:SiLVCIT4WK2z1W+CUHZj4Skq/eaohoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_c3a0330fb2ff2b6e8698cd05b2fb76473380178358dd3eb4739ed28a32a0697f

    • Size

      184KB

    • MD5

      9821be2a9482d8da5269c7030077023d

    • SHA1

      27fa113046f0047f30dfa6b7ff9806e8d822ea17

    • SHA256

      c3a0330fb2ff2b6e8698cd05b2fb76473380178358dd3eb4739ed28a32a0697f

    • SHA512

      79a1bbe7edc3ed97c04f61b5980c0878cfa5cf329798ddc384a42dad1c3025385d037372ac9a891027fce31087a3ad36c0367889f1d5941a3c6414650c8ef375

    • SSDEEP

      3072:SiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoblzoxss7:SiLVCIT4WK2z1W+CUHZj4Skq/eaohoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks