General

  • Target

    JaffaCakes118_fc38a2cb21a883606d7af58a5db0c3dfb621cb139760a1a4004d713de7997088

  • Size

    184KB

  • Sample

    241230-wfvzts1ren

  • MD5

    6edafa4accf06c8811e7915acd0e7064

  • SHA1

    364b6fa03834aa15a8a7771ebda37709369cf8b2

  • SHA256

    fc38a2cb21a883606d7af58a5db0c3dfb621cb139760a1a4004d713de7997088

  • SHA512

    94436e3246d7dfcc5c32e9fe51f9d9cad965348501bc84d5153f31d4ee4cdfbf105d30d69f9402e431faec43c9482a8b107a328ddf0683c05db6f8075d1d1d94

  • SSDEEP

    3072:kJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jia//2uFrSc:JfYOX+wTScR/Xzku9LVwJuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_fc38a2cb21a883606d7af58a5db0c3dfb621cb139760a1a4004d713de7997088

    • Size

      184KB

    • MD5

      6edafa4accf06c8811e7915acd0e7064

    • SHA1

      364b6fa03834aa15a8a7771ebda37709369cf8b2

    • SHA256

      fc38a2cb21a883606d7af58a5db0c3dfb621cb139760a1a4004d713de7997088

    • SHA512

      94436e3246d7dfcc5c32e9fe51f9d9cad965348501bc84d5153f31d4ee4cdfbf105d30d69f9402e431faec43c9482a8b107a328ddf0683c05db6f8075d1d1d94

    • SSDEEP

      3072:kJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jia//2uFrSc:JfYOX+wTScR/Xzku9LVwJuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks