General

  • Target

    JaffaCakes118_bcfa39b8200148548de61eda4351fd6881f9fe0ee4070fd215ecc51eb9710a17

  • Size

    188KB

  • Sample

    241223-xza97sykdn

  • MD5

    73a49ef403188a349ef32f51c0b61244

  • SHA1

    fef8b06bad695c91ef7c6fabf7a31af3db7a2986

  • SHA256

    bcfa39b8200148548de61eda4351fd6881f9fe0ee4070fd215ecc51eb9710a17

  • SHA512

    d59f69a3c07d21076cde8e464704df3131b6daf85b32062363b671ec97d51ef044bdc7596f7debcf587714a71bcfd4334d105a4d943a9cf1d379d89a6e2b5dfd

  • SSDEEP

    3072:TteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzA9qM:bq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_bcfa39b8200148548de61eda4351fd6881f9fe0ee4070fd215ecc51eb9710a17

    • Size

      188KB

    • MD5

      73a49ef403188a349ef32f51c0b61244

    • SHA1

      fef8b06bad695c91ef7c6fabf7a31af3db7a2986

    • SHA256

      bcfa39b8200148548de61eda4351fd6881f9fe0ee4070fd215ecc51eb9710a17

    • SHA512

      d59f69a3c07d21076cde8e464704df3131b6daf85b32062363b671ec97d51ef044bdc7596f7debcf587714a71bcfd4334d105a4d943a9cf1d379d89a6e2b5dfd

    • SSDEEP

      3072:TteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzA9qM:bq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks