General

  • Target

    JaffaCakes118_6f18b8b8cf77688d0e84e22439406a250504710b62c4df6f6f4b1887b74c9856

  • Size

    188KB

  • Sample

    241224-a8p4dsxjcz

  • MD5

    29daa27c7905de9cea858729f7463fa4

  • SHA1

    b2d0fcf622a09dc3f4ca516f39d5c285075b1eb0

  • SHA256

    6f18b8b8cf77688d0e84e22439406a250504710b62c4df6f6f4b1887b74c9856

  • SHA512

    75d1b2446830d55505358db2922fb3c6efd66285c57038bab4c59f892b453261ec9665c8024772fd48e07fec055a7d64361706f33b1e6d2262324da1edadbf88

  • SSDEEP

    3072:gteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzj9qM:0q7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_6f18b8b8cf77688d0e84e22439406a250504710b62c4df6f6f4b1887b74c9856

    • Size

      188KB

    • MD5

      29daa27c7905de9cea858729f7463fa4

    • SHA1

      b2d0fcf622a09dc3f4ca516f39d5c285075b1eb0

    • SHA256

      6f18b8b8cf77688d0e84e22439406a250504710b62c4df6f6f4b1887b74c9856

    • SHA512

      75d1b2446830d55505358db2922fb3c6efd66285c57038bab4c59f892b453261ec9665c8024772fd48e07fec055a7d64361706f33b1e6d2262324da1edadbf88

    • SSDEEP

      3072:gteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzj9qM:0q7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks