General

  • Target

    JaffaCakes118_51fc733c3b257374e69b25dd57067e20b450445e0c92ba746b28705d92208148

  • Size

    184KB

  • Sample

    241230-13kvlatnh1

  • MD5

    a296546c5fd2b769d9cd66e4a32158de

  • SHA1

    dc980b8f8dcf9a0e0fdf48d4f22fc7b7b47cf87d

  • SHA256

    51fc733c3b257374e69b25dd57067e20b450445e0c92ba746b28705d92208148

  • SHA512

    7f504c0a6362cabd9d2fce887c1f681fe232616b55e8c22217f589d0b333064a51742007cfce9852de12017d9f2b8e453c3fa913fcf3b7ee34bb58e99dbf3d9e

  • SSDEEP

    3072:E92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTWrLA:E9NSMOEpQ1Q3ODAr+V6

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_51fc733c3b257374e69b25dd57067e20b450445e0c92ba746b28705d92208148

    • Size

      184KB

    • MD5

      a296546c5fd2b769d9cd66e4a32158de

    • SHA1

      dc980b8f8dcf9a0e0fdf48d4f22fc7b7b47cf87d

    • SHA256

      51fc733c3b257374e69b25dd57067e20b450445e0c92ba746b28705d92208148

    • SHA512

      7f504c0a6362cabd9d2fce887c1f681fe232616b55e8c22217f589d0b333064a51742007cfce9852de12017d9f2b8e453c3fa913fcf3b7ee34bb58e99dbf3d9e

    • SSDEEP

      3072:E92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTWrLA:E9NSMOEpQ1Q3ODAr+V6

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks