General

  • Target

    JaffaCakes118_115c5e704311a9a95d971739651ac773142d6070fa6265b46f59f8cd9d93e791

  • Size

    184KB

  • Sample

    241225-wj5nfa1le1

  • MD5

    e417080928c07242c83cc13425a79ff4

  • SHA1

    4f1a94ac8f7b35be0fb002f4d289adc04c9ddc85

  • SHA256

    115c5e704311a9a95d971739651ac773142d6070fa6265b46f59f8cd9d93e791

  • SHA512

    ab85a67b2b6d05e792e96c82587071663846afba7874111c50b3e21601d825aa1a9b6f0bd8593476eb1265f2fa8ab869507fef2bf5b2e89bdb1db762949f2dd2

  • SSDEEP

    3072:JiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao9lzoxss7:JiLVCIT4WK2z1W+CUHZj4Skq/eaoToC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_115c5e704311a9a95d971739651ac773142d6070fa6265b46f59f8cd9d93e791

    • Size

      184KB

    • MD5

      e417080928c07242c83cc13425a79ff4

    • SHA1

      4f1a94ac8f7b35be0fb002f4d289adc04c9ddc85

    • SHA256

      115c5e704311a9a95d971739651ac773142d6070fa6265b46f59f8cd9d93e791

    • SHA512

      ab85a67b2b6d05e792e96c82587071663846afba7874111c50b3e21601d825aa1a9b6f0bd8593476eb1265f2fa8ab869507fef2bf5b2e89bdb1db762949f2dd2

    • SSDEEP

      3072:JiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao9lzoxss7:JiLVCIT4WK2z1W+CUHZj4Skq/eaoToC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks