General

  • Target

    JaffaCakes118_33e3989c47ecdbace9448e927c15a2de56a81afa913d27b8b581a81583893a6a

  • Size

    184KB

  • Sample

    241229-3g28vszqcl

  • MD5

    155a7e733fe576aedfe64a185dabe8bf

  • SHA1

    952f00dbe4b15e534c015953465cd640f23969a7

  • SHA256

    33e3989c47ecdbace9448e927c15a2de56a81afa913d27b8b581a81583893a6a

  • SHA512

    6b06eedd9ae141caf5a7adc9e61ee2cdaf5f6b7109a2d33dc989f36c82f1779873124be67c971b59d369e864c8b818dcb1471f631a36ff2d11b98123d10344f3

  • SSDEEP

    3072:EiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao5lzoxss7:EiLVCIT4WK2z1W+CUHZj4Skq/eaonoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_33e3989c47ecdbace9448e927c15a2de56a81afa913d27b8b581a81583893a6a

    • Size

      184KB

    • MD5

      155a7e733fe576aedfe64a185dabe8bf

    • SHA1

      952f00dbe4b15e534c015953465cd640f23969a7

    • SHA256

      33e3989c47ecdbace9448e927c15a2de56a81afa913d27b8b581a81583893a6a

    • SHA512

      6b06eedd9ae141caf5a7adc9e61ee2cdaf5f6b7109a2d33dc989f36c82f1779873124be67c971b59d369e864c8b818dcb1471f631a36ff2d11b98123d10344f3

    • SSDEEP

      3072:EiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao5lzoxss7:EiLVCIT4WK2z1W+CUHZj4Skq/eaonoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks