General

  • Target

    f07dfeb0928e8916dd04820f991be2f9_JaffaCakes118

  • Size

    188KB

  • Sample

    240415-hd555agg76

  • MD5

    f07dfeb0928e8916dd04820f991be2f9

  • SHA1

    2b790848f4d4c08964022af9aa07f5162576e1ff

  • SHA256

    7dcd92c7f16bcf2f1d656c9c0537f4592da92a6db47376836de1442dcd9370e1

  • SHA512

    aa4c989a206a5c197661ff9624ff280bea1be134465e671662902fb0004ae9e7a0d8f50479c2b30c7e368925616de63e27230c9b012d6e1bb5e7c63daba08b97

  • SSDEEP

    3072:mA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo1o:mzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      f07dfeb0928e8916dd04820f991be2f9_JaffaCakes118

    • Size

      188KB

    • MD5

      f07dfeb0928e8916dd04820f991be2f9

    • SHA1

      2b790848f4d4c08964022af9aa07f5162576e1ff

    • SHA256

      7dcd92c7f16bcf2f1d656c9c0537f4592da92a6db47376836de1442dcd9370e1

    • SHA512

      aa4c989a206a5c197661ff9624ff280bea1be134465e671662902fb0004ae9e7a0d8f50479c2b30c7e368925616de63e27230c9b012d6e1bb5e7c63daba08b97

    • SSDEEP

      3072:mA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo1o:mzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks