General

  • Target

    JaffaCakes118_cea58ec10017c9c54711416173c3219290fdfce830d8afe2f0a8251c27787231

  • Size

    188KB

  • Sample

    241223-zvr39s1ncn

  • MD5

    6c788258f3ce4eb3c36b74bb733aeb9c

  • SHA1

    49337837f7da39d70638f9f6324ba155e207182e

  • SHA256

    cea58ec10017c9c54711416173c3219290fdfce830d8afe2f0a8251c27787231

  • SHA512

    fa1eacebc8405a9a4838d0d1cc91286924ae0e61bbde3b3872dc72ec0d597294bfe3f96c2f6e98b45ecf227f8edc528f1efaf5515c95ffa20dc9693f2b90b847

  • SSDEEP

    3072:EteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzc9qM:4q7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_cea58ec10017c9c54711416173c3219290fdfce830d8afe2f0a8251c27787231

    • Size

      188KB

    • MD5

      6c788258f3ce4eb3c36b74bb733aeb9c

    • SHA1

      49337837f7da39d70638f9f6324ba155e207182e

    • SHA256

      cea58ec10017c9c54711416173c3219290fdfce830d8afe2f0a8251c27787231

    • SHA512

      fa1eacebc8405a9a4838d0d1cc91286924ae0e61bbde3b3872dc72ec0d597294bfe3f96c2f6e98b45ecf227f8edc528f1efaf5515c95ffa20dc9693f2b90b847

    • SSDEEP

      3072:EteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzc9qM:4q7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks