General

  • Target

    JaffaCakes118_b8ea4f62508044692106fb28f7c397ace9e4bd238870cf113494993c38935382

  • Size

    184KB

  • Sample

    241229-f32swstnaj

  • MD5

    78ee5b1369e1596e6c97dc5e2d0d5255

  • SHA1

    f0eeeef9dcaee25b1737f8b59f24fa8058b37d90

  • SHA256

    b8ea4f62508044692106fb28f7c397ace9e4bd238870cf113494993c38935382

  • SHA512

    af9b06ee8598bebc3dc00236d222211eff3ecb0500c9548ba139503f1e687e4d89d064e060cc25bcd586bc817ca762c659a5996ceb9ad22554ef98d222687acd

  • SSDEEP

    3072:tiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao1lzoxss7:tiLVCIT4WK2z1W+CUHZj4Skq/eaoboC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_b8ea4f62508044692106fb28f7c397ace9e4bd238870cf113494993c38935382

    • Size

      184KB

    • MD5

      78ee5b1369e1596e6c97dc5e2d0d5255

    • SHA1

      f0eeeef9dcaee25b1737f8b59f24fa8058b37d90

    • SHA256

      b8ea4f62508044692106fb28f7c397ace9e4bd238870cf113494993c38935382

    • SHA512

      af9b06ee8598bebc3dc00236d222211eff3ecb0500c9548ba139503f1e687e4d89d064e060cc25bcd586bc817ca762c659a5996ceb9ad22554ef98d222687acd

    • SSDEEP

      3072:tiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao1lzoxss7:tiLVCIT4WK2z1W+CUHZj4Skq/eaoboC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks