General

  • Target

    JaffaCakes118_92ebb25758030e2353abc24f896ebb645a4701ffe38a447c5615889925a9664f

  • Size

    188KB

  • Sample

    241223-xepbbsxnes

  • MD5

    24f79e1b33b611e957ac581d8600a9c4

  • SHA1

    5a68336ee55e807b85592692d2cfa57755b905cc

  • SHA256

    92ebb25758030e2353abc24f896ebb645a4701ffe38a447c5615889925a9664f

  • SHA512

    6afd5cc3546ef6c37db788458fb7f5a545cf856a99d24dd42ca08bd157c600b2e34ac0a741a5fe098a2f2230fd9dd20333e473c79dd92c05d3c9c09a405b1ae1

  • SSDEEP

    3072:YteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzg9qM:cq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_92ebb25758030e2353abc24f896ebb645a4701ffe38a447c5615889925a9664f

    • Size

      188KB

    • MD5

      24f79e1b33b611e957ac581d8600a9c4

    • SHA1

      5a68336ee55e807b85592692d2cfa57755b905cc

    • SHA256

      92ebb25758030e2353abc24f896ebb645a4701ffe38a447c5615889925a9664f

    • SHA512

      6afd5cc3546ef6c37db788458fb7f5a545cf856a99d24dd42ca08bd157c600b2e34ac0a741a5fe098a2f2230fd9dd20333e473c79dd92c05d3c9c09a405b1ae1

    • SSDEEP

      3072:YteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzg9qM:cq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks