General

  • Target

    JaffaCakes118_aa29719eeef7622cec49e8bb0a2f0a18de7f89a6e09884eae13c32579e59f6f2

  • Size

    184KB

  • Sample

    241230-12yp3atngs

  • MD5

    46b96fa2dbaef9ff67fa9a770a8380d7

  • SHA1

    3da180997b2ce3484e6d8e1afae15228f9cd5f60

  • SHA256

    aa29719eeef7622cec49e8bb0a2f0a18de7f89a6e09884eae13c32579e59f6f2

  • SHA512

    331c929a7ec84141910f94147e781038a2a7f67e0b5670c5ea1e323510be0aa6891557d2db37c33d310168afc2462f295ac7a1a58464e15bcb2f7f9f1a0e8bde

  • SSDEEP

    3072:BiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoplzoxss7:BiLVCIT4WK2z1W+CUHZj4Skq/eao3oC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_aa29719eeef7622cec49e8bb0a2f0a18de7f89a6e09884eae13c32579e59f6f2

    • Size

      184KB

    • MD5

      46b96fa2dbaef9ff67fa9a770a8380d7

    • SHA1

      3da180997b2ce3484e6d8e1afae15228f9cd5f60

    • SHA256

      aa29719eeef7622cec49e8bb0a2f0a18de7f89a6e09884eae13c32579e59f6f2

    • SHA512

      331c929a7ec84141910f94147e781038a2a7f67e0b5670c5ea1e323510be0aa6891557d2db37c33d310168afc2462f295ac7a1a58464e15bcb2f7f9f1a0e8bde

    • SSDEEP

      3072:BiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoplzoxss7:BiLVCIT4WK2z1W+CUHZj4Skq/eao3oC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks