General

  • Target

    JaffaCakes118_1e016f5f2626e661471dbc8f53d8de5f673374f4f64b933f89aaa754f1886e33

  • Size

    188KB

  • Sample

    241223-3czbeavnbl

  • MD5

    a86c3f34fee68e1966e8ee1a80c147b7

  • SHA1

    dc95f200024135bbe1fef6e41af96a967c2076ca

  • SHA256

    1e016f5f2626e661471dbc8f53d8de5f673374f4f64b933f89aaa754f1886e33

  • SHA512

    d21e42af818bb13a34e63171ac069bd5e450dbdd39cfd69755f171d6851261a965eee2779507277e5d945d6bb1a65a27e798517b5163bc7f8b42050a044124d3

  • SSDEEP

    3072:steMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz+9qM:Qq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_1e016f5f2626e661471dbc8f53d8de5f673374f4f64b933f89aaa754f1886e33

    • Size

      188KB

    • MD5

      a86c3f34fee68e1966e8ee1a80c147b7

    • SHA1

      dc95f200024135bbe1fef6e41af96a967c2076ca

    • SHA256

      1e016f5f2626e661471dbc8f53d8de5f673374f4f64b933f89aaa754f1886e33

    • SHA512

      d21e42af818bb13a34e63171ac069bd5e450dbdd39cfd69755f171d6851261a965eee2779507277e5d945d6bb1a65a27e798517b5163bc7f8b42050a044124d3

    • SSDEEP

      3072:steMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz+9qM:Qq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks