General

  • Target

    JaffaCakes118_55086595190f4c52471ceca443c2475e0743920de1b7b9e2b0070e294bde9014

  • Size

    184KB

  • Sample

    241225-qjz53atpem

  • MD5

    1917a40b6838fb35e063188943a2e5a5

  • SHA1

    bd6ed4b689ea1ad4ab5db9541014f4e479c56759

  • SHA256

    55086595190f4c52471ceca443c2475e0743920de1b7b9e2b0070e294bde9014

  • SHA512

    081ba23aafd060cf2b62f228c4918a53cbcdca13e8d774e1a6a68e4108e36b956d47e32733e5935c13a591b942e8b8d3e56098f703ddf3980793ff12f1d1da95

  • SSDEEP

    3072:miLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaorlzoxss7:miLVCIT4WK2z1W+CUHZj4Skq/eaoRoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_55086595190f4c52471ceca443c2475e0743920de1b7b9e2b0070e294bde9014

    • Size

      184KB

    • MD5

      1917a40b6838fb35e063188943a2e5a5

    • SHA1

      bd6ed4b689ea1ad4ab5db9541014f4e479c56759

    • SHA256

      55086595190f4c52471ceca443c2475e0743920de1b7b9e2b0070e294bde9014

    • SHA512

      081ba23aafd060cf2b62f228c4918a53cbcdca13e8d774e1a6a68e4108e36b956d47e32733e5935c13a591b942e8b8d3e56098f703ddf3980793ff12f1d1da95

    • SSDEEP

      3072:miLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaorlzoxss7:miLVCIT4WK2z1W+CUHZj4Skq/eaoRoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks