General

  • Target

    JaffaCakes118_9a8fc5e0523032d19038dc3267ba27d797a8c2c45cd215df192f3d19699a19ce

  • Size

    184KB

  • Sample

    241230-fjcdwsynat

  • MD5

    7df706ee693eab0fea0758f46b807677

  • SHA1

    4b84448b5137bd69328a65190eead9be950be805

  • SHA256

    9a8fc5e0523032d19038dc3267ba27d797a8c2c45cd215df192f3d19699a19ce

  • SHA512

    10f113e035647819873bea01c4a9aa3fe4f9c4b3ba1ddc703d24ce783070ac6bbb58b6c5976909ff23f79b613662ea68964bcd4d017f0a00ad26ef864f38b2d5

  • SSDEEP

    3072:n92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTgrLA:n9NSMOEpQ1Q3ODAr+Vc

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_9a8fc5e0523032d19038dc3267ba27d797a8c2c45cd215df192f3d19699a19ce

    • Size

      184KB

    • MD5

      7df706ee693eab0fea0758f46b807677

    • SHA1

      4b84448b5137bd69328a65190eead9be950be805

    • SHA256

      9a8fc5e0523032d19038dc3267ba27d797a8c2c45cd215df192f3d19699a19ce

    • SHA512

      10f113e035647819873bea01c4a9aa3fe4f9c4b3ba1ddc703d24ce783070ac6bbb58b6c5976909ff23f79b613662ea68964bcd4d017f0a00ad26ef864f38b2d5

    • SSDEEP

      3072:n92qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTgrLA:n9NSMOEpQ1Q3ODAr+Vc

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks