General

  • Target

    JaffaCakes118_eeefe08a8befff81adefa963b4c5cc4c46aa0649d91d51289d3b76167b73921f

  • Size

    184KB

  • Sample

    241223-x5ws4aylhk

  • MD5

    ae687d833059b86e3856c8a5af49e6cf

  • SHA1

    d97a9d7565170dec3669c194ed819fafdcef3641

  • SHA256

    eeefe08a8befff81adefa963b4c5cc4c46aa0649d91d51289d3b76167b73921f

  • SHA512

    e5c09020933782ae25417712a226a86fe85682a2723b733632666b0c51acd814eb4684e231076f69aaca6ab471db831957696a51f8908f5ed9ba6c04d7e0b5ea

  • SSDEEP

    3072:iiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoalzoxss7:iiLVCIT4WK2z1W+CUHZj4Skq/eaowoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_eeefe08a8befff81adefa963b4c5cc4c46aa0649d91d51289d3b76167b73921f

    • Size

      184KB

    • MD5

      ae687d833059b86e3856c8a5af49e6cf

    • SHA1

      d97a9d7565170dec3669c194ed819fafdcef3641

    • SHA256

      eeefe08a8befff81adefa963b4c5cc4c46aa0649d91d51289d3b76167b73921f

    • SHA512

      e5c09020933782ae25417712a226a86fe85682a2723b733632666b0c51acd814eb4684e231076f69aaca6ab471db831957696a51f8908f5ed9ba6c04d7e0b5ea

    • SSDEEP

      3072:iiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoalzoxss7:iiLVCIT4WK2z1W+CUHZj4Skq/eaowoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks