General

  • Target

    JaffaCakes118_5026ddae920fe0dad5a88b59f2ca003533004ff2cf64f3c96d67d999e6ce046c

  • Size

    184KB

  • Sample

    241228-23t9psvmbj

  • MD5

    47105b0f7aaa8a37f5135f07a30846b0

  • SHA1

    5742d6364ca29a89eab504797845481fbdb733cb

  • SHA256

    5026ddae920fe0dad5a88b59f2ca003533004ff2cf64f3c96d67d999e6ce046c

  • SHA512

    f1569975a472635eb6883e025094c2542d8d90660103c5a2abb0e06663b5aba93a5abd2b8c1d7d0fab0670db352e6b4574eda8ded1ea02dad9388ca6d78487bb

  • SSDEEP

    3072:ziLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao7lzoxss7:ziLVCIT4WK2z1W+CUHZj4Skq/eaoBoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_5026ddae920fe0dad5a88b59f2ca003533004ff2cf64f3c96d67d999e6ce046c

    • Size

      184KB

    • MD5

      47105b0f7aaa8a37f5135f07a30846b0

    • SHA1

      5742d6364ca29a89eab504797845481fbdb733cb

    • SHA256

      5026ddae920fe0dad5a88b59f2ca003533004ff2cf64f3c96d67d999e6ce046c

    • SHA512

      f1569975a472635eb6883e025094c2542d8d90660103c5a2abb0e06663b5aba93a5abd2b8c1d7d0fab0670db352e6b4574eda8ded1ea02dad9388ca6d78487bb

    • SSDEEP

      3072:ziLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao7lzoxss7:ziLVCIT4WK2z1W+CUHZj4Skq/eaoBoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks