General

  • Target

    JaffaCakes118_a356f751d351efe16c9e12bd32d3db0fbcc8f18271770099d963361f74e7ab05

  • Size

    184KB

  • Sample

    241230-e5e68syjex

  • MD5

    fceb8711257a0dddd5b05ad0995261df

  • SHA1

    ea1dd216dff2069d2426c51dc629efedfa1db786

  • SHA256

    a356f751d351efe16c9e12bd32d3db0fbcc8f18271770099d963361f74e7ab05

  • SHA512

    710c89096f3ded3857d3215eade6be26486697ac08d4b3f9d0709e7611f694ee20917b24f4e4858023095f4888379791e291f5fa9b8b4123a5fc513235de701e

  • SSDEEP

    3072:BJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8J8a//2uFrSc:CfYOX+wTScR/Xzku9LVwLuG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_a356f751d351efe16c9e12bd32d3db0fbcc8f18271770099d963361f74e7ab05

    • Size

      184KB

    • MD5

      fceb8711257a0dddd5b05ad0995261df

    • SHA1

      ea1dd216dff2069d2426c51dc629efedfa1db786

    • SHA256

      a356f751d351efe16c9e12bd32d3db0fbcc8f18271770099d963361f74e7ab05

    • SHA512

      710c89096f3ded3857d3215eade6be26486697ac08d4b3f9d0709e7611f694ee20917b24f4e4858023095f4888379791e291f5fa9b8b4123a5fc513235de701e

    • SSDEEP

      3072:BJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8J8a//2uFrSc:CfYOX+wTScR/Xzku9LVwLuG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks