General

  • Target

    JaffaCakes118_e6ff037ece585b8ce6746e3bae325c594e626648c9f04327083df0f22ac24287

  • Size

    184KB

  • Sample

    241230-1dxsvszlaj

  • MD5

    38f1c470ba50ba762da2c50e518b1e27

  • SHA1

    8517b95fa3b87ff74ba1fe8cbf2ddec95386b389

  • SHA256

    e6ff037ece585b8ce6746e3bae325c594e626648c9f04327083df0f22ac24287

  • SHA512

    bbd76657f243c46affc75f23dcc975fa33cd9c77b0ff8b4e9a83b141e5ee6a9eab49c5c3cf2e9a6c35c0159c4d6cf0c9317a5ceb81894dea48a3eb5c1620e117

  • SSDEEP

    3072:o92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMT0rLA:o9NSMOEpQ1Q3ODAr+VA

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_e6ff037ece585b8ce6746e3bae325c594e626648c9f04327083df0f22ac24287

    • Size

      184KB

    • MD5

      38f1c470ba50ba762da2c50e518b1e27

    • SHA1

      8517b95fa3b87ff74ba1fe8cbf2ddec95386b389

    • SHA256

      e6ff037ece585b8ce6746e3bae325c594e626648c9f04327083df0f22ac24287

    • SHA512

      bbd76657f243c46affc75f23dcc975fa33cd9c77b0ff8b4e9a83b141e5ee6a9eab49c5c3cf2e9a6c35c0159c4d6cf0c9317a5ceb81894dea48a3eb5c1620e117

    • SSDEEP

      3072:o92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMT0rLA:o9NSMOEpQ1Q3ODAr+VA

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks