General

  • Target

    JaffaCakes118_51e026196610162a7c543968f17fdb1e22092150bc2a12202e67211d4113801e

  • Size

    184KB

  • Sample

    241230-24x2zssrgq

  • MD5

    35ce63b9f7254aef818196ed3deaf3fb

  • SHA1

    24f777e62d0b7b534c918151958b938845122388

  • SHA256

    51e026196610162a7c543968f17fdb1e22092150bc2a12202e67211d4113801e

  • SHA512

    2edbd7249f597f9730b8ca8be4dd304e39a9caa5555d10bf047b5ed4937bf71a1413177d3988d3a338e8eeb5b9be3d9f6c78951d8c6c74bd86148babfeea4fcc

  • SSDEEP

    3072:oiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoYlzoxss7:oiLVCIT4WK2z1W+CUHZj4Skq/eaoGoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_51e026196610162a7c543968f17fdb1e22092150bc2a12202e67211d4113801e

    • Size

      184KB

    • MD5

      35ce63b9f7254aef818196ed3deaf3fb

    • SHA1

      24f777e62d0b7b534c918151958b938845122388

    • SHA256

      51e026196610162a7c543968f17fdb1e22092150bc2a12202e67211d4113801e

    • SHA512

      2edbd7249f597f9730b8ca8be4dd304e39a9caa5555d10bf047b5ed4937bf71a1413177d3988d3a338e8eeb5b9be3d9f6c78951d8c6c74bd86148babfeea4fcc

    • SSDEEP

      3072:oiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoYlzoxss7:oiLVCIT4WK2z1W+CUHZj4Skq/eaoGoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks