General

  • Target

    JaffaCakes118_96749d860934be6083df3da7bedf225d846580028518d0c47794d682413b95b9

  • Size

    188KB

  • Sample

    241224-aey47swmcr

  • MD5

    ab955f62091fdf944f78e8b2d49f8353

  • SHA1

    e974b911d2ca8c8d2a36c8b2c38efe5f141ee6d3

  • SHA256

    96749d860934be6083df3da7bedf225d846580028518d0c47794d682413b95b9

  • SHA512

    6de4dfa232dfae0a1bc676e52b2db80238d9d6b17ab98e8bfb01ba9a85c6924410608f8f13b24b7f7f3ba3e6f86d58b193ee5e949d88f3bd5ea2b40d4642bfb6

  • SSDEEP

    3072:cteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzA9qM:gq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_96749d860934be6083df3da7bedf225d846580028518d0c47794d682413b95b9

    • Size

      188KB

    • MD5

      ab955f62091fdf944f78e8b2d49f8353

    • SHA1

      e974b911d2ca8c8d2a36c8b2c38efe5f141ee6d3

    • SHA256

      96749d860934be6083df3da7bedf225d846580028518d0c47794d682413b95b9

    • SHA512

      6de4dfa232dfae0a1bc676e52b2db80238d9d6b17ab98e8bfb01ba9a85c6924410608f8f13b24b7f7f3ba3e6f86d58b193ee5e949d88f3bd5ea2b40d4642bfb6

    • SSDEEP

      3072:cteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzA9qM:gq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks