General

  • Target

    JaffaCakes118_8e6370af9b83861eadfcd85cd8827b329346c431b8d903e675fa0b6b1732528f

  • Size

    188KB

  • Sample

    241223-vta15swjev

  • MD5

    342e11d2a70a90854c4e3452d475d4f8

  • SHA1

    fd9e52ce50e762e303a8f361c2caa454844fd416

  • SHA256

    8e6370af9b83861eadfcd85cd8827b329346c431b8d903e675fa0b6b1732528f

  • SHA512

    91c97352528a3d1488135067f2a507176ab6e38cff97dd9899445d45da7ae967dcb0cee959441517f10b6e13eeb7beaaf92f82c17d1a78c8ec8c3cca5c3c4af8

  • SSDEEP

    3072:3teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz29qM:vq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_8e6370af9b83861eadfcd85cd8827b329346c431b8d903e675fa0b6b1732528f

    • Size

      188KB

    • MD5

      342e11d2a70a90854c4e3452d475d4f8

    • SHA1

      fd9e52ce50e762e303a8f361c2caa454844fd416

    • SHA256

      8e6370af9b83861eadfcd85cd8827b329346c431b8d903e675fa0b6b1732528f

    • SHA512

      91c97352528a3d1488135067f2a507176ab6e38cff97dd9899445d45da7ae967dcb0cee959441517f10b6e13eeb7beaaf92f82c17d1a78c8ec8c3cca5c3c4af8

    • SSDEEP

      3072:3teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz29qM:vq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks