General

  • Target

    JaffaCakes118_753fbe51bad5152d27d5b111aef9dc27bfb6f280737ace98bea9580a0cd78741

  • Size

    188KB

  • Sample

    241224-apczqawmhz

  • MD5

    502d5a7973c538449ecbef9f4cb41c35

  • SHA1

    d9bedcea055c163f6bab3d405a67fe142076fdb7

  • SHA256

    753fbe51bad5152d27d5b111aef9dc27bfb6f280737ace98bea9580a0cd78741

  • SHA512

    5ce04e09430d4ba13d99b8caf3e0b84b3f62f6eb5cf06ec420aa5bb9bf3a77ea34fd55ce557463479597b0235412e5ec7b6a8d5937440bacc32f5e45e1294e71

  • SSDEEP

    3072:bA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoFo:bzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_753fbe51bad5152d27d5b111aef9dc27bfb6f280737ace98bea9580a0cd78741

    • Size

      188KB

    • MD5

      502d5a7973c538449ecbef9f4cb41c35

    • SHA1

      d9bedcea055c163f6bab3d405a67fe142076fdb7

    • SHA256

      753fbe51bad5152d27d5b111aef9dc27bfb6f280737ace98bea9580a0cd78741

    • SHA512

      5ce04e09430d4ba13d99b8caf3e0b84b3f62f6eb5cf06ec420aa5bb9bf3a77ea34fd55ce557463479597b0235412e5ec7b6a8d5937440bacc32f5e45e1294e71

    • SSDEEP

      3072:bA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoFo:bzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks