General

  • Target

    JaffaCakes118_35617b764c6e0725042b033a3da0126a92a53a4a35f232524fe02ff01d7c6593

  • Size

    184KB

  • Sample

    241230-fqgxysyphn

  • MD5

    613aaa89ef218e8cb66c9b6aea35c3e5

  • SHA1

    61e5ecde0f61044b27ea2a19b261ca4e9cd55e67

  • SHA256

    35617b764c6e0725042b033a3da0126a92a53a4a35f232524fe02ff01d7c6593

  • SHA512

    7fff29529c302932a75b2a8500360acbff2af8d2f0f295f1f763ded5e91f932c285690041e4544a5e1b1ac76acdff959cf1904d2dab00c8f7130a64d78113c3a

  • SSDEEP

    3072:092qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTQrLA:09NSMOEpQ1Q3ODAr+VM

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_35617b764c6e0725042b033a3da0126a92a53a4a35f232524fe02ff01d7c6593

    • Size

      184KB

    • MD5

      613aaa89ef218e8cb66c9b6aea35c3e5

    • SHA1

      61e5ecde0f61044b27ea2a19b261ca4e9cd55e67

    • SHA256

      35617b764c6e0725042b033a3da0126a92a53a4a35f232524fe02ff01d7c6593

    • SHA512

      7fff29529c302932a75b2a8500360acbff2af8d2f0f295f1f763ded5e91f932c285690041e4544a5e1b1ac76acdff959cf1904d2dab00c8f7130a64d78113c3a

    • SSDEEP

      3072:092qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMTQrLA:09NSMOEpQ1Q3ODAr+VM

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks