General

  • Target

    JaffaCakes118_9ca02d69fac56dba8382f98d1f97e04dfc6ab83335746e101733ec240e96b4d9

  • Size

    184KB

  • Sample

    241230-fjav3ayncp

  • MD5

    6e35e18ba4642c012380a2b0182e8ad8

  • SHA1

    6542a5390095d3d6715b68eb50c8a1346567e970

  • SHA256

    9ca02d69fac56dba8382f98d1f97e04dfc6ab83335746e101733ec240e96b4d9

  • SHA512

    90fadf523e255e7a1c8b5032af0fdf896f1bff4e2b5adfb530347ce654daa3ad002565c3d645f381d8ab17303b0de1cd97eb6418c0807b4764a7dfa6d9bd437c

  • SSDEEP

    3072:CJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jca//2uFrSc:jfYOX+wTScR/Xzku9LVwruG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_9ca02d69fac56dba8382f98d1f97e04dfc6ab83335746e101733ec240e96b4d9

    • Size

      184KB

    • MD5

      6e35e18ba4642c012380a2b0182e8ad8

    • SHA1

      6542a5390095d3d6715b68eb50c8a1346567e970

    • SHA256

      9ca02d69fac56dba8382f98d1f97e04dfc6ab83335746e101733ec240e96b4d9

    • SHA512

      90fadf523e255e7a1c8b5032af0fdf896f1bff4e2b5adfb530347ce654daa3ad002565c3d645f381d8ab17303b0de1cd97eb6418c0807b4764a7dfa6d9bd437c

    • SSDEEP

      3072:CJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jca//2uFrSc:jfYOX+wTScR/Xzku9LVwruG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks