General

  • Target

    JaffaCakes118_c7f1899540af4d77f5b97ee56916b9ea4c3dd432e51bb10a69699d468092b5d3

  • Size

    184KB

  • Sample

    241223-y589vsznfw

  • MD5

    1e6014b3e318f787531176a3680be8ab

  • SHA1

    3380430261203b1d11e5629643626c7452b5000d

  • SHA256

    c7f1899540af4d77f5b97ee56916b9ea4c3dd432e51bb10a69699d468092b5d3

  • SHA512

    99601dd0a087be010d675d4fb1cab9e8019fe4134c027b6257193c8e582cf9f52ed6467998314b17644408673b1d2582a6d4f60c9105afe61bb18819885c43e1

  • SSDEEP

    3072:XgkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdgudA4l:SPFkq6zOe5ilSanOBd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_c7f1899540af4d77f5b97ee56916b9ea4c3dd432e51bb10a69699d468092b5d3

    • Size

      184KB

    • MD5

      1e6014b3e318f787531176a3680be8ab

    • SHA1

      3380430261203b1d11e5629643626c7452b5000d

    • SHA256

      c7f1899540af4d77f5b97ee56916b9ea4c3dd432e51bb10a69699d468092b5d3

    • SHA512

      99601dd0a087be010d675d4fb1cab9e8019fe4134c027b6257193c8e582cf9f52ed6467998314b17644408673b1d2582a6d4f60c9105afe61bb18819885c43e1

    • SSDEEP

      3072:XgkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdgudA4l:SPFkq6zOe5ilSanOBd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks