General

  • Target

    JaffaCakes118_4f1e82b8d9c95ad20956420b2c782dd1cd0ccd04c7c1135f80f77874f627a868

  • Size

    184KB

  • Sample

    241229-gnqmravkcy

  • MD5

    259b7245f5d028d1cc124ec3217879a2

  • SHA1

    052f6b73df749631acc4c4950624017c91a8cb10

  • SHA256

    4f1e82b8d9c95ad20956420b2c782dd1cd0ccd04c7c1135f80f77874f627a868

  • SHA512

    fb4d156a54211f59f9390af1dd42c702e72391e3dc70e415fee28ab71ef421f9e772dc2adaa2381af30ae27adb934e3a629ab5abdee204d7da890f3f27ebe5bf

  • SSDEEP

    3072:DiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoelzoxss7:DiLVCIT4WK2z1W+CUHZj4Skq/eao8oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_4f1e82b8d9c95ad20956420b2c782dd1cd0ccd04c7c1135f80f77874f627a868

    • Size

      184KB

    • MD5

      259b7245f5d028d1cc124ec3217879a2

    • SHA1

      052f6b73df749631acc4c4950624017c91a8cb10

    • SHA256

      4f1e82b8d9c95ad20956420b2c782dd1cd0ccd04c7c1135f80f77874f627a868

    • SHA512

      fb4d156a54211f59f9390af1dd42c702e72391e3dc70e415fee28ab71ef421f9e772dc2adaa2381af30ae27adb934e3a629ab5abdee204d7da890f3f27ebe5bf

    • SSDEEP

      3072:DiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoelzoxss7:DiLVCIT4WK2z1W+CUHZj4Skq/eao8oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks