General

  • Target

    JaffaCakes118_5b738b61c22b820528c53353655430576a529af196fe447acffeafee1c9cbd24

  • Size

    184KB

  • Sample

    241230-fj6mqsynfl

  • MD5

    8f963be424082bebde4785f7a482fcdd

  • SHA1

    bd485e32e501f7e73ebe9c8a8cd3102eb490648c

  • SHA256

    5b738b61c22b820528c53353655430576a529af196fe447acffeafee1c9cbd24

  • SHA512

    1886a9ff9ef10b42f64b04066bf8b4b2037316ad8b5b3ee94b79cc19fc8c34ec4b5129625a7ff08bf1e9419f98d18e68aef98f867aeee531ed71ba7eaa4783dd

  • SSDEEP

    3072:HiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoFlzoxss7:HiLVCIT4WK2z1W+CUHZj4Skq/eaoLoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_5b738b61c22b820528c53353655430576a529af196fe447acffeafee1c9cbd24

    • Size

      184KB

    • MD5

      8f963be424082bebde4785f7a482fcdd

    • SHA1

      bd485e32e501f7e73ebe9c8a8cd3102eb490648c

    • SHA256

      5b738b61c22b820528c53353655430576a529af196fe447acffeafee1c9cbd24

    • SHA512

      1886a9ff9ef10b42f64b04066bf8b4b2037316ad8b5b3ee94b79cc19fc8c34ec4b5129625a7ff08bf1e9419f98d18e68aef98f867aeee531ed71ba7eaa4783dd

    • SSDEEP

      3072:HiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoFlzoxss7:HiLVCIT4WK2z1W+CUHZj4Skq/eaoLoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks