General

  • Target

    fc8b6d1b2fc9a6d039c345ae9d317c44_JaffaCakes118

  • Size

    188KB

  • Sample

    240420-mf433aeh5x

  • MD5

    fc8b6d1b2fc9a6d039c345ae9d317c44

  • SHA1

    f48cf4fd6b8c1625a17cf0590ffaf941f7f2b5d6

  • SHA256

    524cdcfcd1a56496698c0be5306a2272bcec58999bb1c98c6ed07f3470d1e581

  • SHA512

    fe81e17e5fa63b5e0fd81352b3bbde2619065ce024bf04c00cbf66e2aa74c804f04a75be973148813505db98df48e9885c392b9f7aced00d830610674c3b9d53

  • SSDEEP

    3072:6A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAojo:6zIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      fc8b6d1b2fc9a6d039c345ae9d317c44_JaffaCakes118

    • Size

      188KB

    • MD5

      fc8b6d1b2fc9a6d039c345ae9d317c44

    • SHA1

      f48cf4fd6b8c1625a17cf0590ffaf941f7f2b5d6

    • SHA256

      524cdcfcd1a56496698c0be5306a2272bcec58999bb1c98c6ed07f3470d1e581

    • SHA512

      fe81e17e5fa63b5e0fd81352b3bbde2619065ce024bf04c00cbf66e2aa74c804f04a75be973148813505db98df48e9885c392b9f7aced00d830610674c3b9d53

    • SSDEEP

      3072:6A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAojo:6zIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks