General

  • Target

    JaffaCakes118_e6a5aa63d84291dd44dd86c12ddf96c366b9d90fce943b38696bd089fd14a804

  • Size

    184KB

  • Sample

    241224-bc36taxkcv

  • MD5

    87a3cab4a737878fe8f0258fbc017cbe

  • SHA1

    8f2dbaf97ca472c2bc5cebc343807d3d7cf89c7b

  • SHA256

    e6a5aa63d84291dd44dd86c12ddf96c366b9d90fce943b38696bd089fd14a804

  • SHA512

    717db8b971731063ad5391eaad9196fe670e53b78e1f95739c7346a558d9312dc8017d2a0a4c685c91954cb1f34d61bcb26babad75b8162cf1f193b1ae62e4c0

  • SSDEEP

    3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoWlzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoEoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_e6a5aa63d84291dd44dd86c12ddf96c366b9d90fce943b38696bd089fd14a804

    • Size

      184KB

    • MD5

      87a3cab4a737878fe8f0258fbc017cbe

    • SHA1

      8f2dbaf97ca472c2bc5cebc343807d3d7cf89c7b

    • SHA256

      e6a5aa63d84291dd44dd86c12ddf96c366b9d90fce943b38696bd089fd14a804

    • SHA512

      717db8b971731063ad5391eaad9196fe670e53b78e1f95739c7346a558d9312dc8017d2a0a4c685c91954cb1f34d61bcb26babad75b8162cf1f193b1ae62e4c0

    • SSDEEP

      3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoWlzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoEoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks