General

  • Target

    JaffaCakes118_75a5bdac5af52c99a45caa280ec06205d592bf2bb5da78fce77f600955fcb9c1

  • Size

    188KB

  • Sample

    241223-2m6b2atqap

  • MD5

    134de8df695a01a3a5a5be1469330881

  • SHA1

    5938a972abb10df7abf99ddfa210e9265d31e352

  • SHA256

    75a5bdac5af52c99a45caa280ec06205d592bf2bb5da78fce77f600955fcb9c1

  • SHA512

    da9bf0a8d87b1ff789a9926e4b81f9ba5618dc27425ebd345622a7a449c4f301488d5f8eb8dcc236987149626b61aedd39fa022ff3ed7ab9184692f9c0507476

  • SSDEEP

    3072:YteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz/9qM:cq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_75a5bdac5af52c99a45caa280ec06205d592bf2bb5da78fce77f600955fcb9c1

    • Size

      188KB

    • MD5

      134de8df695a01a3a5a5be1469330881

    • SHA1

      5938a972abb10df7abf99ddfa210e9265d31e352

    • SHA256

      75a5bdac5af52c99a45caa280ec06205d592bf2bb5da78fce77f600955fcb9c1

    • SHA512

      da9bf0a8d87b1ff789a9926e4b81f9ba5618dc27425ebd345622a7a449c4f301488d5f8eb8dcc236987149626b61aedd39fa022ff3ed7ab9184692f9c0507476

    • SSDEEP

      3072:YteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz/9qM:cq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks