General

  • Target

    JaffaCakes118_101de1f5f085495798d72c2e6bce881a3a551cc3221e84fce45f1129e0f7a990

  • Size

    188KB

  • Sample

    241224-bqck1sxngw

  • MD5

    267adf3f3e5ceb79f45a15176a23a0f4

  • SHA1

    2bc2e808d28b73165d265596303318d208e43eec

  • SHA256

    101de1f5f085495798d72c2e6bce881a3a551cc3221e84fce45f1129e0f7a990

  • SHA512

    e277baac6f0221b4ea9b6ea8f0fd97a43600c2df6f2d62d0c701544453b317ee48738f42a3f63e2e95f2b77ee00fd2334328db3b4bbf1088fcc798600df1bfcd

  • SSDEEP

    3072:pteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzK9qM:lq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_101de1f5f085495798d72c2e6bce881a3a551cc3221e84fce45f1129e0f7a990

    • Size

      188KB

    • MD5

      267adf3f3e5ceb79f45a15176a23a0f4

    • SHA1

      2bc2e808d28b73165d265596303318d208e43eec

    • SHA256

      101de1f5f085495798d72c2e6bce881a3a551cc3221e84fce45f1129e0f7a990

    • SHA512

      e277baac6f0221b4ea9b6ea8f0fd97a43600c2df6f2d62d0c701544453b317ee48738f42a3f63e2e95f2b77ee00fd2334328db3b4bbf1088fcc798600df1bfcd

    • SSDEEP

      3072:pteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzK9qM:lq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks