General

  • Target

    JaffaCakes118_35370a0ea94992c2899027f283533af155848ad18d88dc1d8585eda711a4db2b

  • Size

    184KB

  • Sample

    241227-ctn9nazkhk

  • MD5

    ea4542c09869501f2c9fa8ae90e5fa50

  • SHA1

    2c2063823b9afde1341e27028be2918a18f08d40

  • SHA256

    35370a0ea94992c2899027f283533af155848ad18d88dc1d8585eda711a4db2b

  • SHA512

    56850da891cf428021e29ee013f19eef0f5acc2bf0adfe1c5dd2af01cce2b6e679b077b31ed0e2be8f4428369e3cde9eea2caeb75f294d231b6e941cf51b6f83

  • SSDEEP

    3072:SiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoMlzoxss7:SiLVCIT4WK2z1W+CUHZj4Skq/eaoyoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_35370a0ea94992c2899027f283533af155848ad18d88dc1d8585eda711a4db2b

    • Size

      184KB

    • MD5

      ea4542c09869501f2c9fa8ae90e5fa50

    • SHA1

      2c2063823b9afde1341e27028be2918a18f08d40

    • SHA256

      35370a0ea94992c2899027f283533af155848ad18d88dc1d8585eda711a4db2b

    • SHA512

      56850da891cf428021e29ee013f19eef0f5acc2bf0adfe1c5dd2af01cce2b6e679b077b31ed0e2be8f4428369e3cde9eea2caeb75f294d231b6e941cf51b6f83

    • SSDEEP

      3072:SiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoMlzoxss7:SiLVCIT4WK2z1W+CUHZj4Skq/eaoyoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks