General

  • Target

    JaffaCakes118_b6db11c49ee21526fc0b8e9989adbd7c6b796e2ea5179b8881a37261990db68e

  • Size

    188KB

  • Sample

    241223-v3hscawlev

  • MD5

    c550fd470808967d75d9cdd8a1366a1c

  • SHA1

    5062166a34800a46029e5aa9366aab94839d3806

  • SHA256

    b6db11c49ee21526fc0b8e9989adbd7c6b796e2ea5179b8881a37261990db68e

  • SHA512

    6fc56c1fac78b5bea5aafbb05de66b3191acb13353beebfa43060ba174f5146b627061cf9a5af4747b2f1e38ab19154df95513b5b0dc1fe3148592dc3be8b774

  • SSDEEP

    3072:/teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz99qM:nq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_b6db11c49ee21526fc0b8e9989adbd7c6b796e2ea5179b8881a37261990db68e

    • Size

      188KB

    • MD5

      c550fd470808967d75d9cdd8a1366a1c

    • SHA1

      5062166a34800a46029e5aa9366aab94839d3806

    • SHA256

      b6db11c49ee21526fc0b8e9989adbd7c6b796e2ea5179b8881a37261990db68e

    • SHA512

      6fc56c1fac78b5bea5aafbb05de66b3191acb13353beebfa43060ba174f5146b627061cf9a5af4747b2f1e38ab19154df95513b5b0dc1fe3148592dc3be8b774

    • SSDEEP

      3072:/teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz99qM:nq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks