General

  • Target

    JaffaCakes118_777ff5e927a10729e8380700a6382c0acd631baaf2189bc29db0266c2d023856

  • Size

    184KB

  • Sample

    241230-zmj3pa1kf1

  • MD5

    67015d96a92de8a25fbe4f8ce3458818

  • SHA1

    bdaa8ee4bcbb43a81580bd83eb74e7bbab5a331f

  • SHA256

    777ff5e927a10729e8380700a6382c0acd631baaf2189bc29db0266c2d023856

  • SHA512

    ffaa7acfad938cdf2bbef0abac3919e989fbb270c82fc402713a7db12346fb01bbdf042d5311d65feef2aea52bc36956af2a2167f73722abb979edc44e04c847

  • SSDEEP

    3072:OJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jra//2uFrSc:3fYOX+wTScR/Xzku9LVwsuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_777ff5e927a10729e8380700a6382c0acd631baaf2189bc29db0266c2d023856

    • Size

      184KB

    • MD5

      67015d96a92de8a25fbe4f8ce3458818

    • SHA1

      bdaa8ee4bcbb43a81580bd83eb74e7bbab5a331f

    • SHA256

      777ff5e927a10729e8380700a6382c0acd631baaf2189bc29db0266c2d023856

    • SHA512

      ffaa7acfad938cdf2bbef0abac3919e989fbb270c82fc402713a7db12346fb01bbdf042d5311d65feef2aea52bc36956af2a2167f73722abb979edc44e04c847

    • SSDEEP

      3072:OJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jra//2uFrSc:3fYOX+wTScR/Xzku9LVwsuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks