General

  • Target

    JaffaCakes118_64a9998db0b10998d11d848c3841ddb79b5173ce9d7de004bc5817ae44e71f79

  • Size

    184KB

  • Sample

    241229-ftel1atles

  • MD5

    d763a33099e65dc9a41c455ae43f961b

  • SHA1

    16957cb4228cb2aab9c32c6ff45c7a428a1c307d

  • SHA256

    64a9998db0b10998d11d848c3841ddb79b5173ce9d7de004bc5817ae44e71f79

  • SHA512

    c6a211807b0cdd70d17f0922bed49e180442d16ca94b4e4bdb2a7bd0ae8281be1f1f09c4710ab9e7cd9fc6a837088d4cf126c744789a3477ca93933e83dd0b12

  • SSDEEP

    3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoTlzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoJoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_64a9998db0b10998d11d848c3841ddb79b5173ce9d7de004bc5817ae44e71f79

    • Size

      184KB

    • MD5

      d763a33099e65dc9a41c455ae43f961b

    • SHA1

      16957cb4228cb2aab9c32c6ff45c7a428a1c307d

    • SHA256

      64a9998db0b10998d11d848c3841ddb79b5173ce9d7de004bc5817ae44e71f79

    • SHA512

      c6a211807b0cdd70d17f0922bed49e180442d16ca94b4e4bdb2a7bd0ae8281be1f1f09c4710ab9e7cd9fc6a837088d4cf126c744789a3477ca93933e83dd0b12

    • SSDEEP

      3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoTlzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoJoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks