General

  • Target

    JaffaCakes118_77280dab67cc577956057ae637d933f08469c1c7f7f156cad3f15240ad4c4d3b

  • Size

    184KB

  • Sample

    241224-z6khkaxqdn

  • MD5

    d45135a749a3d0c82cdb7815b95784a4

  • SHA1

    cd6ac35734418e65b80d8ecc1e71027a10bb6a17

  • SHA256

    77280dab67cc577956057ae637d933f08469c1c7f7f156cad3f15240ad4c4d3b

  • SHA512

    20e7ed3fbe5a39c15c941d0ebf65aa6240db88e2764097676d9c42453be797d6acae18c0c694077bd005543a38d3b653c74a2b9cbada146353f3801233d8cfa5

  • SSDEEP

    3072:4iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaorlzoxss7:4iLVCIT4WK2z1W+CUHZj4Skq/eaoRoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_77280dab67cc577956057ae637d933f08469c1c7f7f156cad3f15240ad4c4d3b

    • Size

      184KB

    • MD5

      d45135a749a3d0c82cdb7815b95784a4

    • SHA1

      cd6ac35734418e65b80d8ecc1e71027a10bb6a17

    • SHA256

      77280dab67cc577956057ae637d933f08469c1c7f7f156cad3f15240ad4c4d3b

    • SHA512

      20e7ed3fbe5a39c15c941d0ebf65aa6240db88e2764097676d9c42453be797d6acae18c0c694077bd005543a38d3b653c74a2b9cbada146353f3801233d8cfa5

    • SSDEEP

      3072:4iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaorlzoxss7:4iLVCIT4WK2z1W+CUHZj4Skq/eaoRoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks