General

  • Target

    JaffaCakes118_b4420e4b8f74afce7a9414686489b23350ce676da91b5333129d2deb91995fdc

  • Size

    188KB

  • Sample

    241223-1fvfhsslam

  • MD5

    a400e38a4bce3020697ab04221634846

  • SHA1

    dd681def094114fc632138eeb4a4ff22b0f43897

  • SHA256

    b4420e4b8f74afce7a9414686489b23350ce676da91b5333129d2deb91995fdc

  • SHA512

    20e4d2ccbe6919146724a72aad91d8b0e83accb340487029beba849cbced3ee6b0aefe4b4e65ea757a8802c5c92960b4f2fe3c19a866b2786d8010651094de8e

  • SSDEEP

    3072:0teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzX9qM:Iq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_b4420e4b8f74afce7a9414686489b23350ce676da91b5333129d2deb91995fdc

    • Size

      188KB

    • MD5

      a400e38a4bce3020697ab04221634846

    • SHA1

      dd681def094114fc632138eeb4a4ff22b0f43897

    • SHA256

      b4420e4b8f74afce7a9414686489b23350ce676da91b5333129d2deb91995fdc

    • SHA512

      20e4d2ccbe6919146724a72aad91d8b0e83accb340487029beba849cbced3ee6b0aefe4b4e65ea757a8802c5c92960b4f2fe3c19a866b2786d8010651094de8e

    • SSDEEP

      3072:0teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzX9qM:Iq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks