General

  • Target

    JaffaCakes118_673d156ddc14478ccfd685f78b27cd9ad49b90446355794b26f94db86f7b5e97

  • Size

    188KB

  • Sample

    241223-v3afzawld1

  • MD5

    e99da7167ba45e04f510246ab5c8d28b

  • SHA1

    a3e158dbc2fce4ced203a14343e6c017d2904954

  • SHA256

    673d156ddc14478ccfd685f78b27cd9ad49b90446355794b26f94db86f7b5e97

  • SHA512

    b651d3ff9d8d311984b3af581041f28d608353ddaada393c35879b8fca8b782989d60fb2499425bd9071fc2a0182777fe054c4ae84af14a26edb987711892b61

  • SSDEEP

    3072:EpteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzg9qM:Elq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_673d156ddc14478ccfd685f78b27cd9ad49b90446355794b26f94db86f7b5e97

    • Size

      188KB

    • MD5

      e99da7167ba45e04f510246ab5c8d28b

    • SHA1

      a3e158dbc2fce4ced203a14343e6c017d2904954

    • SHA256

      673d156ddc14478ccfd685f78b27cd9ad49b90446355794b26f94db86f7b5e97

    • SHA512

      b651d3ff9d8d311984b3af581041f28d608353ddaada393c35879b8fca8b782989d60fb2499425bd9071fc2a0182777fe054c4ae84af14a26edb987711892b61

    • SSDEEP

      3072:EpteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzg9qM:Elq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks