General

  • Target

    JaffaCakes118_5839e412fae63cf8c5e6b3e7bd129bf7454ccd0cb5b636d1f735d909f9b21fa7

  • Size

    188KB

  • Sample

    241223-27zd8avlfm

  • MD5

    422b7ef0beaf8da9864db6a908bcbc87

  • SHA1

    69502470b0e18b24372ced040bdabdc8e09dc898

  • SHA256

    5839e412fae63cf8c5e6b3e7bd129bf7454ccd0cb5b636d1f735d909f9b21fa7

  • SHA512

    19d7b8625eab84e4bd0d5719eba1fd512cc2bd4be7113c7f5a665ea11bd7d69c013d9e0264d986a3aa881e0484bb07ad2c5d585b0fc7028ad49ba4b712d97e42

  • SSDEEP

    3072:XteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzB9qM:Pq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_5839e412fae63cf8c5e6b3e7bd129bf7454ccd0cb5b636d1f735d909f9b21fa7

    • Size

      188KB

    • MD5

      422b7ef0beaf8da9864db6a908bcbc87

    • SHA1

      69502470b0e18b24372ced040bdabdc8e09dc898

    • SHA256

      5839e412fae63cf8c5e6b3e7bd129bf7454ccd0cb5b636d1f735d909f9b21fa7

    • SHA512

      19d7b8625eab84e4bd0d5719eba1fd512cc2bd4be7113c7f5a665ea11bd7d69c013d9e0264d986a3aa881e0484bb07ad2c5d585b0fc7028ad49ba4b712d97e42

    • SSDEEP

      3072:XteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzB9qM:Pq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks