General

  • Target

    JaffaCakes118_0949ca74ac0d991d5c9be39237138226f52d76310645ce88fed2e11c8420798f

  • Size

    188KB

  • Sample

    241223-zg2esazrhs

  • MD5

    45c81b5aeede7740e0b87dcc31e46112

  • SHA1

    895cdd33565ccf229cad5ca6886012e7f320f00a

  • SHA256

    0949ca74ac0d991d5c9be39237138226f52d76310645ce88fed2e11c8420798f

  • SHA512

    4b701bd0ab136c1273fb0fe1cb75d04aa5161b486797552eb2ca4560cca1b4951f1a749d92b966826619422d68e94e738da4a4a4ae27c5613389632e972689ad

  • SSDEEP

    3072:zteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzM9qM:7q7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_0949ca74ac0d991d5c9be39237138226f52d76310645ce88fed2e11c8420798f

    • Size

      188KB

    • MD5

      45c81b5aeede7740e0b87dcc31e46112

    • SHA1

      895cdd33565ccf229cad5ca6886012e7f320f00a

    • SHA256

      0949ca74ac0d991d5c9be39237138226f52d76310645ce88fed2e11c8420798f

    • SHA512

      4b701bd0ab136c1273fb0fe1cb75d04aa5161b486797552eb2ca4560cca1b4951f1a749d92b966826619422d68e94e738da4a4a4ae27c5613389632e972689ad

    • SSDEEP

      3072:zteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzM9qM:7q7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks