General

  • Target

    JaffaCakes118_070f980a8ae00c4800ea59e9155294ae7fd8d17d159ff0a645f249071744a881

  • Size

    188KB

  • Sample

    241223-2r9j9atpaz

  • MD5

    be97615302bfe6f6cc5e498dd9a43c1c

  • SHA1

    fdc7739f652a491d2291f2e0129d947697e24bd8

  • SHA256

    070f980a8ae00c4800ea59e9155294ae7fd8d17d159ff0a645f249071744a881

  • SHA512

    32087f7a2b1359cf356b254cb9ceb6b0d7b0ae562b049199595a3e660be206e92b9e43450f554654499896377f370d2ff6c12e8d413e722eddef482f1378afaa

  • SSDEEP

    3072:8teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzo9qM:Aq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_070f980a8ae00c4800ea59e9155294ae7fd8d17d159ff0a645f249071744a881

    • Size

      188KB

    • MD5

      be97615302bfe6f6cc5e498dd9a43c1c

    • SHA1

      fdc7739f652a491d2291f2e0129d947697e24bd8

    • SHA256

      070f980a8ae00c4800ea59e9155294ae7fd8d17d159ff0a645f249071744a881

    • SHA512

      32087f7a2b1359cf356b254cb9ceb6b0d7b0ae562b049199595a3e660be206e92b9e43450f554654499896377f370d2ff6c12e8d413e722eddef482f1378afaa

    • SSDEEP

      3072:8teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzo9qM:Aq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks