General

  • Target

    JaffaCakes118_6732b268993681f372b26703f7754550ee533a645d09ee713cf03371c2a8261c

  • Size

    184KB

  • Sample

    241225-v91lqs1lbq

  • MD5

    cfb1d64fbc5a08ed64cff7273af16e6d

  • SHA1

    bb057fe91c21cf0c09f9709af3f6ec58e5417a8a

  • SHA256

    6732b268993681f372b26703f7754550ee533a645d09ee713cf03371c2a8261c

  • SHA512

    f25d30965496b251f50c2b2ac31b243899a3849621f358cd47e9f2f0eb0ed4194e7c18411e7c70e3dc47091f7dfde859816c69a01470a6f4a482a773f7f7ff5d

  • SSDEEP

    3072:UiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoilzoxss7:UiLVCIT4WK2z1W+CUHZj4Skq/eaoIoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_6732b268993681f372b26703f7754550ee533a645d09ee713cf03371c2a8261c

    • Size

      184KB

    • MD5

      cfb1d64fbc5a08ed64cff7273af16e6d

    • SHA1

      bb057fe91c21cf0c09f9709af3f6ec58e5417a8a

    • SHA256

      6732b268993681f372b26703f7754550ee533a645d09ee713cf03371c2a8261c

    • SHA512

      f25d30965496b251f50c2b2ac31b243899a3849621f358cd47e9f2f0eb0ed4194e7c18411e7c70e3dc47091f7dfde859816c69a01470a6f4a482a773f7f7ff5d

    • SSDEEP

      3072:UiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoilzoxss7:UiLVCIT4WK2z1W+CUHZj4Skq/eaoIoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks