General

  • Target

    JaffaCakes118_4d45d0fff3fb8cc3034735dd382b751353ad74f710edb4b2890641edb8bdf9f7

  • Size

    188KB

  • Sample

    241223-vfbqhsvqgl

  • MD5

    07332e7f7b3ea2464ccfd3cebe131d7d

  • SHA1

    488b9afd680a46a8c12b14ff4b8673b6e7252ad7

  • SHA256

    4d45d0fff3fb8cc3034735dd382b751353ad74f710edb4b2890641edb8bdf9f7

  • SHA512

    02025f55d1c955093850838fb57253ca9be497737ce6ab787aaec970a3d77778ef46d26d6e12eae9b33d597c2338f555a879080e0b03674242674e825eb523ae

  • SSDEEP

    3072:EteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz49qM:4q7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_4d45d0fff3fb8cc3034735dd382b751353ad74f710edb4b2890641edb8bdf9f7

    • Size

      188KB

    • MD5

      07332e7f7b3ea2464ccfd3cebe131d7d

    • SHA1

      488b9afd680a46a8c12b14ff4b8673b6e7252ad7

    • SHA256

      4d45d0fff3fb8cc3034735dd382b751353ad74f710edb4b2890641edb8bdf9f7

    • SHA512

      02025f55d1c955093850838fb57253ca9be497737ce6ab787aaec970a3d77778ef46d26d6e12eae9b33d597c2338f555a879080e0b03674242674e825eb523ae

    • SSDEEP

      3072:EteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz49qM:4q7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks