General

  • Target

    JaffaCakes118_8328c4418a57e8f812f22010926f300e19c648460f93f9aa4cda4b5a1fffd413

  • Size

    184KB

  • Sample

    241224-sq76cs1jbl

  • MD5

    58490745bb881d6254f024bdcd15daee

  • SHA1

    79aab0eb1f8034460310eead7b39525ca3a0a9e2

  • SHA256

    8328c4418a57e8f812f22010926f300e19c648460f93f9aa4cda4b5a1fffd413

  • SHA512

    1c9f8fddc37c4a20963763b6bab7a5e8b2bb7217aeb184c3af688b9330f5d59334e37516aa450b45e5ac12aae5d1cf42722199c2b2636524017452e0e4c40045

  • SSDEEP

    3072:uiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoElzoxss7:uiLVCIT4WK2z1W+CUHZj4Skq/eao6oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_8328c4418a57e8f812f22010926f300e19c648460f93f9aa4cda4b5a1fffd413

    • Size

      184KB

    • MD5

      58490745bb881d6254f024bdcd15daee

    • SHA1

      79aab0eb1f8034460310eead7b39525ca3a0a9e2

    • SHA256

      8328c4418a57e8f812f22010926f300e19c648460f93f9aa4cda4b5a1fffd413

    • SHA512

      1c9f8fddc37c4a20963763b6bab7a5e8b2bb7217aeb184c3af688b9330f5d59334e37516aa450b45e5ac12aae5d1cf42722199c2b2636524017452e0e4c40045

    • SSDEEP

      3072:uiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoElzoxss7:uiLVCIT4WK2z1W+CUHZj4Skq/eao6oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks