General

  • Target

    JaffaCakes118_d95ea92052e18625fd6f8da5ce783edde7c3083eecfcc960b3d56cf7d6c86e18

  • Size

    184KB

  • Sample

    241230-12157atngv

  • MD5

    4c52885b0aa18577c9bb03ea0f5fcf2e

  • SHA1

    fe3fdcafaa38d8456a06c061c75075e455c4e33a

  • SHA256

    d95ea92052e18625fd6f8da5ce783edde7c3083eecfcc960b3d56cf7d6c86e18

  • SHA512

    cc78845a3760cb376f7a8bfb6136e88f01b0e3ad020d45abe185db0877443ad3372986fb8ea832245901e91f175d2b4afc71abdb32571d67878902a067fdad56

  • SSDEEP

    3072:dJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8J0a//2uFrSc:mfYOX+wTScR/Xzku9LVw3uG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_d95ea92052e18625fd6f8da5ce783edde7c3083eecfcc960b3d56cf7d6c86e18

    • Size

      184KB

    • MD5

      4c52885b0aa18577c9bb03ea0f5fcf2e

    • SHA1

      fe3fdcafaa38d8456a06c061c75075e455c4e33a

    • SHA256

      d95ea92052e18625fd6f8da5ce783edde7c3083eecfcc960b3d56cf7d6c86e18

    • SHA512

      cc78845a3760cb376f7a8bfb6136e88f01b0e3ad020d45abe185db0877443ad3372986fb8ea832245901e91f175d2b4afc71abdb32571d67878902a067fdad56

    • SSDEEP

      3072:dJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8J0a//2uFrSc:mfYOX+wTScR/Xzku9LVw3uG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks