General

  • Target

    JaffaCakes118_2ed7cba8be26ac7c320a5885e17bc429f9d1017a53b44849695fe07c68b5c1bd

  • Size

    184KB

  • Sample

    241229-djvjcs1jfk

  • MD5

    8685783f45ebc0562c38ffa228b535e4

  • SHA1

    49b7c512f88a392599f266d8f758cc7ec0bafdf3

  • SHA256

    2ed7cba8be26ac7c320a5885e17bc429f9d1017a53b44849695fe07c68b5c1bd

  • SHA512

    13bd490869daee087b97ead648721531d20320ebcb9406ce3918d3614151cd9a08b5e64cc5e4a91333481a4c1fd6bb8d6f1f0e01694750ae2eb6be9d0b503cd8

  • SSDEEP

    3072:niLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoelzoxss7:niLVCIT4WK2z1W+CUHZj4Skq/eao8oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_2ed7cba8be26ac7c320a5885e17bc429f9d1017a53b44849695fe07c68b5c1bd

    • Size

      184KB

    • MD5

      8685783f45ebc0562c38ffa228b535e4

    • SHA1

      49b7c512f88a392599f266d8f758cc7ec0bafdf3

    • SHA256

      2ed7cba8be26ac7c320a5885e17bc429f9d1017a53b44849695fe07c68b5c1bd

    • SHA512

      13bd490869daee087b97ead648721531d20320ebcb9406ce3918d3614151cd9a08b5e64cc5e4a91333481a4c1fd6bb8d6f1f0e01694750ae2eb6be9d0b503cd8

    • SSDEEP

      3072:niLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoelzoxss7:niLVCIT4WK2z1W+CUHZj4Skq/eao8oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks