General

  • Target

    JaffaCakes118_4186bd8990c36fcb58dfd022500047d87fd334c2429165f69d8dc2292635ea0a

  • Size

    188KB

  • Sample

    241223-11hbpatjcp

  • MD5

    d62ed87fcdfa7ce56d16768b3fccb37d

  • SHA1

    804b7af1022e6840486cc835e97f8dae605f96b3

  • SHA256

    4186bd8990c36fcb58dfd022500047d87fd334c2429165f69d8dc2292635ea0a

  • SHA512

    90e5446f199075dd7fc14127700fbdc266f0c036d6af4208940b7b7916e0398d9883bd2c9f73a645f4d50d49c54c175bdc404604a4277677b94300d3b77ed92a

  • SSDEEP

    3072:yteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzI9qM:6q7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_4186bd8990c36fcb58dfd022500047d87fd334c2429165f69d8dc2292635ea0a

    • Size

      188KB

    • MD5

      d62ed87fcdfa7ce56d16768b3fccb37d

    • SHA1

      804b7af1022e6840486cc835e97f8dae605f96b3

    • SHA256

      4186bd8990c36fcb58dfd022500047d87fd334c2429165f69d8dc2292635ea0a

    • SHA512

      90e5446f199075dd7fc14127700fbdc266f0c036d6af4208940b7b7916e0398d9883bd2c9f73a645f4d50d49c54c175bdc404604a4277677b94300d3b77ed92a

    • SSDEEP

      3072:yteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzI9qM:6q7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks