General

  • Target

    JaffaCakes118_f9c3aa15a4cff3e81597a4e2a941652aaadda4ad7c17b40f47795cf7e645200b

  • Size

    184KB

  • Sample

    241230-etca7sxqbl

  • MD5

    0680c1209cc94ccefce2d5c19afd6fbf

  • SHA1

    c3b2287b70a2b62855708ea96ff5d6146294ab90

  • SHA256

    f9c3aa15a4cff3e81597a4e2a941652aaadda4ad7c17b40f47795cf7e645200b

  • SHA512

    8210527210bc07d5c858c51781a0363102fe6cd2ff5430668f1407e90d5a9d54d92317ac77e8b7e09dd782f76a33e2f66e5bdc9112309f5a26be0f75286cf7da

  • SSDEEP

    3072:I92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMT4rLA:I9NSMOEpQ1Q3ODAr+Vs

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_f9c3aa15a4cff3e81597a4e2a941652aaadda4ad7c17b40f47795cf7e645200b

    • Size

      184KB

    • MD5

      0680c1209cc94ccefce2d5c19afd6fbf

    • SHA1

      c3b2287b70a2b62855708ea96ff5d6146294ab90

    • SHA256

      f9c3aa15a4cff3e81597a4e2a941652aaadda4ad7c17b40f47795cf7e645200b

    • SHA512

      8210527210bc07d5c858c51781a0363102fe6cd2ff5430668f1407e90d5a9d54d92317ac77e8b7e09dd782f76a33e2f66e5bdc9112309f5a26be0f75286cf7da

    • SSDEEP

      3072:I92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMT4rLA:I9NSMOEpQ1Q3ODAr+Vs

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks