General

  • Target

    JaffaCakes118_be5be9e64d204e3b985bd69c51e3ab4672a3f457387317bec836bafaf4e2d8dc

  • Size

    184KB

  • Sample

    241230-xex88swlhz

  • MD5

    dfa25408e9c55fc9b833456903124299

  • SHA1

    6704ed8b7975b1f84ccd6c2573a63f34a0725253

  • SHA256

    be5be9e64d204e3b985bd69c51e3ab4672a3f457387317bec836bafaf4e2d8dc

  • SHA512

    3afc252612619513deed446c3819aa59c8b3d4d93115e2d1c7bd8088bd7b684e64cf42d4bb5f44babbdaf999db2efbaa12754ff6272d53367ffce526d48f0e4a

  • SSDEEP

    3072:4iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao8lzoxss7:4iLVCIT4WK2z1W+CUHZj4Skq/eaoCoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_be5be9e64d204e3b985bd69c51e3ab4672a3f457387317bec836bafaf4e2d8dc

    • Size

      184KB

    • MD5

      dfa25408e9c55fc9b833456903124299

    • SHA1

      6704ed8b7975b1f84ccd6c2573a63f34a0725253

    • SHA256

      be5be9e64d204e3b985bd69c51e3ab4672a3f457387317bec836bafaf4e2d8dc

    • SHA512

      3afc252612619513deed446c3819aa59c8b3d4d93115e2d1c7bd8088bd7b684e64cf42d4bb5f44babbdaf999db2efbaa12754ff6272d53367ffce526d48f0e4a

    • SSDEEP

      3072:4iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao8lzoxss7:4iLVCIT4WK2z1W+CUHZj4Skq/eaoCoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks