General

  • Target

    JaffaCakes118_5d4fda77eed9a6525153d373f431c9aad32602b58f739aecbd7ae70f672b9bde

  • Size

    188KB

  • Sample

    241224-at563awqfl

  • MD5

    c45ece10cb5f5ea7cab97ba6c1a61251

  • SHA1

    1404d5c980f72a3932f79ed0af45fde42a9bef7d

  • SHA256

    5d4fda77eed9a6525153d373f431c9aad32602b58f739aecbd7ae70f672b9bde

  • SHA512

    42fb3381c177147f97f291ae24304edf5246c192b646e4922b1e28317ae4ba37cddbdc045e010e6e7eb8edb65e6297441c90b2a7826825b9c401df2114f9283c

  • SSDEEP

    3072:7teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzi9qM:Tq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_5d4fda77eed9a6525153d373f431c9aad32602b58f739aecbd7ae70f672b9bde

    • Size

      188KB

    • MD5

      c45ece10cb5f5ea7cab97ba6c1a61251

    • SHA1

      1404d5c980f72a3932f79ed0af45fde42a9bef7d

    • SHA256

      5d4fda77eed9a6525153d373f431c9aad32602b58f739aecbd7ae70f672b9bde

    • SHA512

      42fb3381c177147f97f291ae24304edf5246c192b646e4922b1e28317ae4ba37cddbdc045e010e6e7eb8edb65e6297441c90b2a7826825b9c401df2114f9283c

    • SSDEEP

      3072:7teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzi9qM:Tq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks