General

  • Target

    JaffaCakes118_a7b849a715e5f625008d7aaabbd17542547c32c461fe6e871dcb0e3ca4c09f7e

  • Size

    188KB

  • Sample

    241223-zn2zws1lfp

  • MD5

    02c94bdf754b67c14dce0b63d68c5455

  • SHA1

    72475dd094893bae9969e7f7aa58c240242b627b

  • SHA256

    a7b849a715e5f625008d7aaabbd17542547c32c461fe6e871dcb0e3ca4c09f7e

  • SHA512

    f1725fef8e8ee29083218d8b5f3daf47cc727430576be3af38b1c8cd4f4915aece2016e0a372f20da538d57c5f0514a897629b63c0abef8090ccb20dd7a806ba

  • SSDEEP

    3072:kA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoko:kzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_a7b849a715e5f625008d7aaabbd17542547c32c461fe6e871dcb0e3ca4c09f7e

    • Size

      188KB

    • MD5

      02c94bdf754b67c14dce0b63d68c5455

    • SHA1

      72475dd094893bae9969e7f7aa58c240242b627b

    • SHA256

      a7b849a715e5f625008d7aaabbd17542547c32c461fe6e871dcb0e3ca4c09f7e

    • SHA512

      f1725fef8e8ee29083218d8b5f3daf47cc727430576be3af38b1c8cd4f4915aece2016e0a372f20da538d57c5f0514a897629b63c0abef8090ccb20dd7a806ba

    • SSDEEP

      3072:kA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoko:kzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks