General

  • Target

    JaffaCakes118_119db06e4d9c21036bf4382ebf9be483e0a3c023f5630d8f5ab692bdebbb599f

  • Size

    184KB

  • Sample

    241229-edcl2a1qf1

  • MD5

    e3e76cd93b18eec03aa23bae6639c288

  • SHA1

    e34e3e4d853fed990d63df89d6868e5e79a7b9a2

  • SHA256

    119db06e4d9c21036bf4382ebf9be483e0a3c023f5630d8f5ab692bdebbb599f

  • SHA512

    ed081da886a53289677f6128e202e4527a85bceb8128cb91b51104f8840caabae542e83d4235cf5127217af7b65d31232e9e42f4526802a94e3c2e022166efc5

  • SSDEEP

    3072:qiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoDlzoxss7:qiLVCIT4WK2z1W+CUHZj4Skq/eaoZoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_119db06e4d9c21036bf4382ebf9be483e0a3c023f5630d8f5ab692bdebbb599f

    • Size

      184KB

    • MD5

      e3e76cd93b18eec03aa23bae6639c288

    • SHA1

      e34e3e4d853fed990d63df89d6868e5e79a7b9a2

    • SHA256

      119db06e4d9c21036bf4382ebf9be483e0a3c023f5630d8f5ab692bdebbb599f

    • SHA512

      ed081da886a53289677f6128e202e4527a85bceb8128cb91b51104f8840caabae542e83d4235cf5127217af7b65d31232e9e42f4526802a94e3c2e022166efc5

    • SSDEEP

      3072:qiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoDlzoxss7:qiLVCIT4WK2z1W+CUHZj4Skq/eaoZoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks