General

  • Target

    JaffaCakes118_2b9117d51f49722ab5def80b3442242a190483812905f9c96e1f1e873b476981

  • Size

    184KB

  • Sample

    241230-v6vajstnes

  • MD5

    3f666b3467078cc100792e0968553cb6

  • SHA1

    eb2dd2c3864fa620c602cd89b78a1daaf3561303

  • SHA256

    2b9117d51f49722ab5def80b3442242a190483812905f9c96e1f1e873b476981

  • SHA512

    e6c620f169c044cc72c63a84630b549e48c29954874b4e1088e4014147368e3c3646347ae450549fc2ab89e151c22de589aa1df6caadb9833a80e3d28d9e42d0

  • SSDEEP

    3072:JiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoilzoxss7:JiLVCIT4WK2z1W+CUHZj4Skq/eaoIoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_2b9117d51f49722ab5def80b3442242a190483812905f9c96e1f1e873b476981

    • Size

      184KB

    • MD5

      3f666b3467078cc100792e0968553cb6

    • SHA1

      eb2dd2c3864fa620c602cd89b78a1daaf3561303

    • SHA256

      2b9117d51f49722ab5def80b3442242a190483812905f9c96e1f1e873b476981

    • SHA512

      e6c620f169c044cc72c63a84630b549e48c29954874b4e1088e4014147368e3c3646347ae450549fc2ab89e151c22de589aa1df6caadb9833a80e3d28d9e42d0

    • SSDEEP

      3072:JiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoilzoxss7:JiLVCIT4WK2z1W+CUHZj4Skq/eaoIoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks