General

  • Target

    JaffaCakes118_4e98ac60c8d406e8b32559fff1164fc001cf020cc6d267edb9620d9bbea00235

  • Size

    188KB

  • Sample

    241223-3t1wkawjen

  • MD5

    d111ac9982fef7513f115681a520dbc3

  • SHA1

    676e06bbcacf9decb4295813907b0825dab34a2a

  • SHA256

    4e98ac60c8d406e8b32559fff1164fc001cf020cc6d267edb9620d9bbea00235

  • SHA512

    5c1ed0a0e549ec1540a2a88016441bda2a4bc9d537be82ea6e27f61a554f5e435c5d9b00ba0a15da13c9ec454e0a77fa8bd41cadd0cf57674356da5694b75a83

  • SSDEEP

    3072:hteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzC9qM:tq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_4e98ac60c8d406e8b32559fff1164fc001cf020cc6d267edb9620d9bbea00235

    • Size

      188KB

    • MD5

      d111ac9982fef7513f115681a520dbc3

    • SHA1

      676e06bbcacf9decb4295813907b0825dab34a2a

    • SHA256

      4e98ac60c8d406e8b32559fff1164fc001cf020cc6d267edb9620d9bbea00235

    • SHA512

      5c1ed0a0e549ec1540a2a88016441bda2a4bc9d537be82ea6e27f61a554f5e435c5d9b00ba0a15da13c9ec454e0a77fa8bd41cadd0cf57674356da5694b75a83

    • SSDEEP

      3072:hteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzC9qM:tq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks