General

  • Target

    JaffaCakes118_8107da351ee2058b0e9ee7996adc3d42403506b31a05035c1199a11c62df2d01

  • Size

    188KB

  • Sample

    241223-zy86ys1pdn

  • MD5

    007afa0887d17b3c456df8c24bbbb57a

  • SHA1

    f6c24d8c985fd7f5d582080e4fb4c01fcc60fbdd

  • SHA256

    8107da351ee2058b0e9ee7996adc3d42403506b31a05035c1199a11c62df2d01

  • SHA512

    95adc3e92dc3256be83aa2c6a725ce2f4fc4dff7915d41d206c3e5f9862eb0b55b157a3db2d58b5249499ea7e19c552cc04398ca4b661a34479e6249169264e4

  • SSDEEP

    3072:/teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzu9qM:nq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_8107da351ee2058b0e9ee7996adc3d42403506b31a05035c1199a11c62df2d01

    • Size

      188KB

    • MD5

      007afa0887d17b3c456df8c24bbbb57a

    • SHA1

      f6c24d8c985fd7f5d582080e4fb4c01fcc60fbdd

    • SHA256

      8107da351ee2058b0e9ee7996adc3d42403506b31a05035c1199a11c62df2d01

    • SHA512

      95adc3e92dc3256be83aa2c6a725ce2f4fc4dff7915d41d206c3e5f9862eb0b55b157a3db2d58b5249499ea7e19c552cc04398ca4b661a34479e6249169264e4

    • SSDEEP

      3072:/teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzu9qM:nq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks