General

  • Target

    JaffaCakes118_bb5b9968794ccb85447454f741a4eb1611dc87bf77ec00808ab98d4e7d640e2b

  • Size

    184KB

  • Sample

    241228-2wdndatqfx

  • MD5

    bbf1fd2e9cc4291f8347ced89d0c8db4

  • SHA1

    0752cd736cc92b84a4536c85e3e10d07d6048930

  • SHA256

    bb5b9968794ccb85447454f741a4eb1611dc87bf77ec00808ab98d4e7d640e2b

  • SHA512

    b46df814f10ddd43e8b4875358fb4a951259fdbd7555411c3ee394c896b20cdb28477caabf46b88103420da9c33fc6b53ee013bc74a2e5a2df4c0ddac0377d84

  • SSDEEP

    3072:yiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoelzoxss7:yiLVCIT4WK2z1W+CUHZj4Skq/eao8oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_bb5b9968794ccb85447454f741a4eb1611dc87bf77ec00808ab98d4e7d640e2b

    • Size

      184KB

    • MD5

      bbf1fd2e9cc4291f8347ced89d0c8db4

    • SHA1

      0752cd736cc92b84a4536c85e3e10d07d6048930

    • SHA256

      bb5b9968794ccb85447454f741a4eb1611dc87bf77ec00808ab98d4e7d640e2b

    • SHA512

      b46df814f10ddd43e8b4875358fb4a951259fdbd7555411c3ee394c896b20cdb28477caabf46b88103420da9c33fc6b53ee013bc74a2e5a2df4c0ddac0377d84

    • SSDEEP

      3072:yiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoelzoxss7:yiLVCIT4WK2z1W+CUHZj4Skq/eao8oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks