General

  • Target

    JaffaCakes118_008b03333035fc7d6ba86046c86bf46b9b34ba0a5e654f5779c5fa1ee8177030

  • Size

    188KB

  • Sample

    241223-wstbrsxjaq

  • MD5

    a7c7d2b3be00178c6d259c73aa7b6fe7

  • SHA1

    f4d6da2d327b2a86d8bcb0875cef35ddad4908e6

  • SHA256

    008b03333035fc7d6ba86046c86bf46b9b34ba0a5e654f5779c5fa1ee8177030

  • SHA512

    d0650d5db4480db1e519897751d5dcdd1a783ea16b597c62954f864fdff0a8fce08278dd4d1739247484f65511784d2d36967d1153dfa8573b2613bd74641613

  • SSDEEP

    3072:3teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz/9qM:vq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_008b03333035fc7d6ba86046c86bf46b9b34ba0a5e654f5779c5fa1ee8177030

    • Size

      188KB

    • MD5

      a7c7d2b3be00178c6d259c73aa7b6fe7

    • SHA1

      f4d6da2d327b2a86d8bcb0875cef35ddad4908e6

    • SHA256

      008b03333035fc7d6ba86046c86bf46b9b34ba0a5e654f5779c5fa1ee8177030

    • SHA512

      d0650d5db4480db1e519897751d5dcdd1a783ea16b597c62954f864fdff0a8fce08278dd4d1739247484f65511784d2d36967d1153dfa8573b2613bd74641613

    • SSDEEP

      3072:3teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz/9qM:vq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks