General

  • Target

    JaffaCakes118_c6c4ce47ddefe1d20fd94604e6a755537cb7cce85fc6964bfabf6a7e23e07e62

  • Size

    184KB

  • Sample

    241224-stzy6a1jgn

  • MD5

    25f298eb8a1b5bde0fd0220f95c26510

  • SHA1

    10091834e32e7a96a356f69af4e66ec110e87529

  • SHA256

    c6c4ce47ddefe1d20fd94604e6a755537cb7cce85fc6964bfabf6a7e23e07e62

  • SHA512

    784c23fe9d24d03c7b9d868900f858c8c019f6494d16e301c81d6522a5d0bc25093e7fe5d2655a1d880bcb2cf875dc91f1f780f1730e7b603c1ba2067ce9fd10

  • SSDEEP

    3072:aiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoJlzoxss7:aiLVCIT4WK2z1W+CUHZj4Skq/eaoXoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_c6c4ce47ddefe1d20fd94604e6a755537cb7cce85fc6964bfabf6a7e23e07e62

    • Size

      184KB

    • MD5

      25f298eb8a1b5bde0fd0220f95c26510

    • SHA1

      10091834e32e7a96a356f69af4e66ec110e87529

    • SHA256

      c6c4ce47ddefe1d20fd94604e6a755537cb7cce85fc6964bfabf6a7e23e07e62

    • SHA512

      784c23fe9d24d03c7b9d868900f858c8c019f6494d16e301c81d6522a5d0bc25093e7fe5d2655a1d880bcb2cf875dc91f1f780f1730e7b603c1ba2067ce9fd10

    • SSDEEP

      3072:aiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoJlzoxss7:aiLVCIT4WK2z1W+CUHZj4Skq/eaoXoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks