General

  • Target

    JaffaCakes118_266f53ea2768b644caa92c702be8005ba76fcbc6f10e7d3689d3f2dad9277e26

  • Size

    184KB

  • Sample

    241229-mp763szkcj

  • MD5

    8ad771548615494cb1149920962374dc

  • SHA1

    5ca358e5da4859ce05cb70261ce9bb4ca032a7f5

  • SHA256

    266f53ea2768b644caa92c702be8005ba76fcbc6f10e7d3689d3f2dad9277e26

  • SHA512

    230c5223bc64e7ba02e2e2da0d96531b67b1fe90b1e2d5992a27e3077417e2f2f6100e754785fe3afeb1a0beda890c249e18d9bffbdb68a1802e05e7fde25c65

  • SSDEEP

    3072:PiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoClzoxss7:PiLVCIT4WK2z1W+CUHZj4Skq/eaoooC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_266f53ea2768b644caa92c702be8005ba76fcbc6f10e7d3689d3f2dad9277e26

    • Size

      184KB

    • MD5

      8ad771548615494cb1149920962374dc

    • SHA1

      5ca358e5da4859ce05cb70261ce9bb4ca032a7f5

    • SHA256

      266f53ea2768b644caa92c702be8005ba76fcbc6f10e7d3689d3f2dad9277e26

    • SHA512

      230c5223bc64e7ba02e2e2da0d96531b67b1fe90b1e2d5992a27e3077417e2f2f6100e754785fe3afeb1a0beda890c249e18d9bffbdb68a1802e05e7fde25c65

    • SSDEEP

      3072:PiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoClzoxss7:PiLVCIT4WK2z1W+CUHZj4Skq/eaoooC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks