General

  • Target

    JaffaCakes118_27a5dba75a65efe4b5144f1bae2dddd772a099728f116ece4cfb364d772ae600

  • Size

    184KB

  • Sample

    241229-2ecdzsypbn

  • MD5

    0681bb826233391cfbf0233099d1b2c3

  • SHA1

    b3dbea0d3c8b9bfa9644983ff72a54fa5619e7ee

  • SHA256

    27a5dba75a65efe4b5144f1bae2dddd772a099728f116ece4cfb364d772ae600

  • SHA512

    e2e61a168fd26570b6c8f065b0552eb27e3e18af51e6672d36030b76007e2119a6133927b2d80f0ff44f136fd06f63689b720bd5248c0e6d2d529c1a111a539e

  • SSDEEP

    3072:wiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoflzoxss7:wiLVCIT4WK2z1W+CUHZj4Skq/eao9oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_27a5dba75a65efe4b5144f1bae2dddd772a099728f116ece4cfb364d772ae600

    • Size

      184KB

    • MD5

      0681bb826233391cfbf0233099d1b2c3

    • SHA1

      b3dbea0d3c8b9bfa9644983ff72a54fa5619e7ee

    • SHA256

      27a5dba75a65efe4b5144f1bae2dddd772a099728f116ece4cfb364d772ae600

    • SHA512

      e2e61a168fd26570b6c8f065b0552eb27e3e18af51e6672d36030b76007e2119a6133927b2d80f0ff44f136fd06f63689b720bd5248c0e6d2d529c1a111a539e

    • SSDEEP

      3072:wiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoflzoxss7:wiLVCIT4WK2z1W+CUHZj4Skq/eao9oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks