General

  • Target

    JaffaCakes118_74d1bf1e99f699c49418ac165b69d217c5ef76c245ac4eb015da240609d9969b

  • Size

    188KB

  • Sample

    241223-1z7j7atjbm

  • MD5

    fc99fddd76bb567514ff6e03bf2e4111

  • SHA1

    9331cebdf4da7f18f708ef76703f798e0e349978

  • SHA256

    74d1bf1e99f699c49418ac165b69d217c5ef76c245ac4eb015da240609d9969b

  • SHA512

    31d1558778b604152c381bdb68381168d04a10ec847e9b0f2d25ee54ea1b7cc2ec612e3382bfba5e58d45e13bcfdfde669b1e1720444c459da54385e6fcf913f

  • SSDEEP

    3072:LteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzK9qM:Dq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_74d1bf1e99f699c49418ac165b69d217c5ef76c245ac4eb015da240609d9969b

    • Size

      188KB

    • MD5

      fc99fddd76bb567514ff6e03bf2e4111

    • SHA1

      9331cebdf4da7f18f708ef76703f798e0e349978

    • SHA256

      74d1bf1e99f699c49418ac165b69d217c5ef76c245ac4eb015da240609d9969b

    • SHA512

      31d1558778b604152c381bdb68381168d04a10ec847e9b0f2d25ee54ea1b7cc2ec612e3382bfba5e58d45e13bcfdfde669b1e1720444c459da54385e6fcf913f

    • SSDEEP

      3072:LteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzK9qM:Dq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks