General

  • Target

    JaffaCakes118_e36acaead579f040451980ddf891551835caa75b8fabd92b724d82ac4979f4ee

  • Size

    188KB

  • Sample

    241223-yjjgbayqgz

  • MD5

    788c7eb7b98433f7344b918b3014967e

  • SHA1

    c9b3518490a541e78a34847c3489c7cd315c5882

  • SHA256

    e36acaead579f040451980ddf891551835caa75b8fabd92b724d82ac4979f4ee

  • SHA512

    877dab84cd184cfb41c967a0774cf033a538443d4587297540e11325d44fdad451fe6e8caa4180ec7865daa533a212be226e7c8e6af43840b271c8d76c23ca1c

  • SSDEEP

    3072:qteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzH9qM:Cq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_e36acaead579f040451980ddf891551835caa75b8fabd92b724d82ac4979f4ee

    • Size

      188KB

    • MD5

      788c7eb7b98433f7344b918b3014967e

    • SHA1

      c9b3518490a541e78a34847c3489c7cd315c5882

    • SHA256

      e36acaead579f040451980ddf891551835caa75b8fabd92b724d82ac4979f4ee

    • SHA512

      877dab84cd184cfb41c967a0774cf033a538443d4587297540e11325d44fdad451fe6e8caa4180ec7865daa533a212be226e7c8e6af43840b271c8d76c23ca1c

    • SSDEEP

      3072:qteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzH9qM:Cq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks