General

  • Target

    JaffaCakes118_6a6cd7dfe5fa2bead8a243b8a68d9f9de857630fa588c4efe05892329f4351f1

  • Size

    188KB

  • Sample

    241224-aa3xlawjdt

  • MD5

    ff9b478f619cdf25e71050592fa66aaa

  • SHA1

    9187371997ec78702a57e837577fa90dbd185109

  • SHA256

    6a6cd7dfe5fa2bead8a243b8a68d9f9de857630fa588c4efe05892329f4351f1

  • SHA512

    05a78169a2f3c02f161e262c6b0b8527a444aaa8d44918f24a0fea649c325b3e3ab9c79b603785f8c750df8029820a73141021bdd771af51c3df6e8712f8286d

  • SSDEEP

    3072:qteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz29qM:Cq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_6a6cd7dfe5fa2bead8a243b8a68d9f9de857630fa588c4efe05892329f4351f1

    • Size

      188KB

    • MD5

      ff9b478f619cdf25e71050592fa66aaa

    • SHA1

      9187371997ec78702a57e837577fa90dbd185109

    • SHA256

      6a6cd7dfe5fa2bead8a243b8a68d9f9de857630fa588c4efe05892329f4351f1

    • SHA512

      05a78169a2f3c02f161e262c6b0b8527a444aaa8d44918f24a0fea649c325b3e3ab9c79b603785f8c750df8029820a73141021bdd771af51c3df6e8712f8286d

    • SSDEEP

      3072:qteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz29qM:Cq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks