General

  • Target
    e3e87b488c31a7c86747024d9421c6e6_JaffaCakes118
  • Size 188KB
  • Sample240407-dhp79abd2z
  • SHA256 6a84c0021b74aeffa7c9074575c313d3eaf8a483f84972f94020f4fe53b0cc9c
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • dridex

Botnet
  • 22201

C2
  • 103.82.248.59:443

  • 54.39.98.141:6602

  • 103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target
      e3e87b488c31a7c86747024d9421c6e6_JaffaCakes118
    • Size 188KB
    • SHA256 6a84c0021b74aeffa7c9074575c313d3eaf8a483f84972f94020f4fe53b0cc9c
    • MD5 SHA1 SHA512 SSDEEP
    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks