General

  • Target

    JaffaCakes118_80fcc86b0906030e5bb2d5b766be21ef68f3bd0aecba584ddf0597226f71325e

  • Size

    188KB

  • Sample

    241223-x2jdlaykhn

  • MD5

    dbda1d0eb265b3b734ecd191bf24854e

  • SHA1

    02d663873a3b962be497d3769d1f3bbcdbbf58ab

  • SHA256

    80fcc86b0906030e5bb2d5b766be21ef68f3bd0aecba584ddf0597226f71325e

  • SHA512

    68588c8cd5ae1609fe74582e3a5055d0e76b6c6b1b28e409e51ef34d93748111c5084df5e957481d6e1e95eb47670ad17cd8a0d41fc8d37d25ce345e5d091e80

  • SSDEEP

    3072:+teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzq9qM:2q7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_80fcc86b0906030e5bb2d5b766be21ef68f3bd0aecba584ddf0597226f71325e

    • Size

      188KB

    • MD5

      dbda1d0eb265b3b734ecd191bf24854e

    • SHA1

      02d663873a3b962be497d3769d1f3bbcdbbf58ab

    • SHA256

      80fcc86b0906030e5bb2d5b766be21ef68f3bd0aecba584ddf0597226f71325e

    • SHA512

      68588c8cd5ae1609fe74582e3a5055d0e76b6c6b1b28e409e51ef34d93748111c5084df5e957481d6e1e95eb47670ad17cd8a0d41fc8d37d25ce345e5d091e80

    • SSDEEP

      3072:+teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzq9qM:2q7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks