General

  • Target

    JaffaCakes118_78245516f68ec3004b9ff42a5c106d9cfe26e3cd54d24b29a9c2495fe4f7f1d0

  • Size

    184KB

  • Sample

    241230-eq1vdsxpdr

  • MD5

    cb2c71dc92cbc5cd850958d28b968652

  • SHA1

    169a5027d755ada1b8203a5ecf30c88bdf464660

  • SHA256

    78245516f68ec3004b9ff42a5c106d9cfe26e3cd54d24b29a9c2495fe4f7f1d0

  • SHA512

    b7a7f588989996b48608f3ec3e3778a1a2de2c72609225c0ad60d68858cceb2b4cecb6634a2c6262a0d9244579a294a69f9a5c844c9fc81694b27d4005354ff0

  • SSDEEP

    3072:092qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTarLA:09NSMOEpQ1Q3ODAr+VW

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_78245516f68ec3004b9ff42a5c106d9cfe26e3cd54d24b29a9c2495fe4f7f1d0

    • Size

      184KB

    • MD5

      cb2c71dc92cbc5cd850958d28b968652

    • SHA1

      169a5027d755ada1b8203a5ecf30c88bdf464660

    • SHA256

      78245516f68ec3004b9ff42a5c106d9cfe26e3cd54d24b29a9c2495fe4f7f1d0

    • SHA512

      b7a7f588989996b48608f3ec3e3778a1a2de2c72609225c0ad60d68858cceb2b4cecb6634a2c6262a0d9244579a294a69f9a5c844c9fc81694b27d4005354ff0

    • SSDEEP

      3072:092qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTarLA:09NSMOEpQ1Q3ODAr+VW

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks