General

  • Target

    JaffaCakes118_eb6fe66919215846b84f98070584b66dc76036bc1f0cbf11c08da2b705bcd336

  • Size

    184KB

  • Sample

    241230-1q4ryatjdx

  • MD5

    dc99f2ccf9765cd19b329b15f3876637

  • SHA1

    a45f9ad29c032c07696d9d853522855edb185699

  • SHA256

    eb6fe66919215846b84f98070584b66dc76036bc1f0cbf11c08da2b705bcd336

  • SHA512

    e8a1d084e41e437b517661e335b6270d9092fe1da7a9931585b2a11de2a2468b8af243e98aca2fa6db8d14dfdf57833b6da35c96c80284516f15752ba0d755df

  • SSDEEP

    3072:sJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JQa//2uFrSc:RfYOX+wTScR/Xzku9LVwXuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_eb6fe66919215846b84f98070584b66dc76036bc1f0cbf11c08da2b705bcd336

    • Size

      184KB

    • MD5

      dc99f2ccf9765cd19b329b15f3876637

    • SHA1

      a45f9ad29c032c07696d9d853522855edb185699

    • SHA256

      eb6fe66919215846b84f98070584b66dc76036bc1f0cbf11c08da2b705bcd336

    • SHA512

      e8a1d084e41e437b517661e335b6270d9092fe1da7a9931585b2a11de2a2468b8af243e98aca2fa6db8d14dfdf57833b6da35c96c80284516f15752ba0d755df

    • SSDEEP

      3072:sJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8JQa//2uFrSc:RfYOX+wTScR/Xzku9LVwXuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks