General

  • Target

    JaffaCakes118_85fbbe682bd96e4fed3875971e742d60e770aa7f9f40a6de686635f6edcb4819

  • Size

    188KB

  • Sample

    241223-3t24mawjeq

  • MD5

    6509c55f37d3a648f85c86adbd7710d1

  • SHA1

    6c5ad36e8273d74708a1dcab8e5c1fd9e883c1ad

  • SHA256

    85fbbe682bd96e4fed3875971e742d60e770aa7f9f40a6de686635f6edcb4819

  • SHA512

    053cb8bba40dc7fa59d3a84a21e9a11f7a1f3561fb0c3b752aeb19d4a7feaaaf11eef749cb8f21adbff2bf7f1fcb3aa07070a61a58b53687701839fbc36c3eb9

  • SSDEEP

    3072:HteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzq9qM:fq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_85fbbe682bd96e4fed3875971e742d60e770aa7f9f40a6de686635f6edcb4819

    • Size

      188KB

    • MD5

      6509c55f37d3a648f85c86adbd7710d1

    • SHA1

      6c5ad36e8273d74708a1dcab8e5c1fd9e883c1ad

    • SHA256

      85fbbe682bd96e4fed3875971e742d60e770aa7f9f40a6de686635f6edcb4819

    • SHA512

      053cb8bba40dc7fa59d3a84a21e9a11f7a1f3561fb0c3b752aeb19d4a7feaaaf11eef749cb8f21adbff2bf7f1fcb3aa07070a61a58b53687701839fbc36c3eb9

    • SSDEEP

      3072:HteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzq9qM:fq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks