General

  • Target

    JaffaCakes118_bc1be3d29df3f38d53253f15e47781db41cba10fe354f6b1a9ad3951e876e1d7

  • Size

    188KB

  • Sample

    241223-1jgntsslhr

  • MD5

    6c2f9c5099af6387f05595f5c6c0539d

  • SHA1

    ccd40ae3bc9f5b59d6a6a1a2627629d83e62d715

  • SHA256

    bc1be3d29df3f38d53253f15e47781db41cba10fe354f6b1a9ad3951e876e1d7

  • SHA512

    5b9b39e18773d35057d735fe76d0b0af60d97f320946b576e76a7b37e5bc08f88ee05fcecab91a68f99a5a07d053d53116fbfa9cdc88b473e2e53c857fb32fcf

  • SSDEEP

    3072:cteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzy9qM:gq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_bc1be3d29df3f38d53253f15e47781db41cba10fe354f6b1a9ad3951e876e1d7

    • Size

      188KB

    • MD5

      6c2f9c5099af6387f05595f5c6c0539d

    • SHA1

      ccd40ae3bc9f5b59d6a6a1a2627629d83e62d715

    • SHA256

      bc1be3d29df3f38d53253f15e47781db41cba10fe354f6b1a9ad3951e876e1d7

    • SHA512

      5b9b39e18773d35057d735fe76d0b0af60d97f320946b576e76a7b37e5bc08f88ee05fcecab91a68f99a5a07d053d53116fbfa9cdc88b473e2e53c857fb32fcf

    • SSDEEP

      3072:cteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzy9qM:gq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks