General

  • Target

    JaffaCakes118_e41cc8870ca43aca9ebe0c5f9b683027e8d0eb15fb637d5b43c10fb0fb6493cb

  • Size

    188KB

  • Sample

    241223-3fz24svlhx

  • MD5

    a3499b2dcb8182b64e73b5f1ed270968

  • SHA1

    af5b82a85cccd20744b184a689ae4f31e5a3e397

  • SHA256

    e41cc8870ca43aca9ebe0c5f9b683027e8d0eb15fb637d5b43c10fb0fb6493cb

  • SHA512

    0fd714a21e4f988df4d67f59868e8dcbf59a3ef74346f3a84c882a3acb1706013986b92f37eb09ff2691a457a5fdeea1f0556877b71e0e66497df4be724f30c9

  • SSDEEP

    3072:cteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzt9qM:gq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_e41cc8870ca43aca9ebe0c5f9b683027e8d0eb15fb637d5b43c10fb0fb6493cb

    • Size

      188KB

    • MD5

      a3499b2dcb8182b64e73b5f1ed270968

    • SHA1

      af5b82a85cccd20744b184a689ae4f31e5a3e397

    • SHA256

      e41cc8870ca43aca9ebe0c5f9b683027e8d0eb15fb637d5b43c10fb0fb6493cb

    • SHA512

      0fd714a21e4f988df4d67f59868e8dcbf59a3ef74346f3a84c882a3acb1706013986b92f37eb09ff2691a457a5fdeea1f0556877b71e0e66497df4be724f30c9

    • SSDEEP

      3072:cteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzt9qM:gq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks