General

  • Target

    JaffaCakes118_4abe6ab981f44478067862b97ef14e43d61e90934f6ce3eda98176892a27d83b

  • Size

    184KB

  • Sample

    241225-q6t8bsvkhj

  • MD5

    daf65dca5c11c24281515b9c8ae99766

  • SHA1

    224dfb5d38e4550b28d6d7aedd4b1122c0452f88

  • SHA256

    4abe6ab981f44478067862b97ef14e43d61e90934f6ce3eda98176892a27d83b

  • SHA512

    b668ca599ef113d84a5fbfad22ba5c13bbf30f94bb93771b136cbb98faf567ab6821e5f1ea62b3969aaec4f008cfc85ba17c31d3f976962b8295b0931aa351e7

  • SSDEEP

    3072:wiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao4lzoxss7:wiLVCIT4WK2z1W+CUHZj4Skq/eaomoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_4abe6ab981f44478067862b97ef14e43d61e90934f6ce3eda98176892a27d83b

    • Size

      184KB

    • MD5

      daf65dca5c11c24281515b9c8ae99766

    • SHA1

      224dfb5d38e4550b28d6d7aedd4b1122c0452f88

    • SHA256

      4abe6ab981f44478067862b97ef14e43d61e90934f6ce3eda98176892a27d83b

    • SHA512

      b668ca599ef113d84a5fbfad22ba5c13bbf30f94bb93771b136cbb98faf567ab6821e5f1ea62b3969aaec4f008cfc85ba17c31d3f976962b8295b0931aa351e7

    • SSDEEP

      3072:wiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao4lzoxss7:wiLVCIT4WK2z1W+CUHZj4Skq/eaomoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks