General

  • Target

    JaffaCakes118_e70d29acac232272c1d2d5f665c6cc63ec07fa005a2b83fe4b261130278c60a6

  • Size

    184KB

  • Sample

    241224-btdbqaxpe1

  • MD5

    420355566caaac5e486c3aa7b9c06e1b

  • SHA1

    521134459600f0f4af6a5b701bea8c05e705d85c

  • SHA256

    e70d29acac232272c1d2d5f665c6cc63ec07fa005a2b83fe4b261130278c60a6

  • SHA512

    e1ce5d93c9d04a1cace17deafd059f33e380a6e8d7d30a0179cd8006faabb0a6658af6e13d1cd0e56349c20bddcd97af859b494929ae32a7de110ac0efdc0ea7

  • SSDEEP

    3072:XgkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdgbdA4l:SPFkq6zOe5ilSanOAd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_e70d29acac232272c1d2d5f665c6cc63ec07fa005a2b83fe4b261130278c60a6

    • Size

      184KB

    • MD5

      420355566caaac5e486c3aa7b9c06e1b

    • SHA1

      521134459600f0f4af6a5b701bea8c05e705d85c

    • SHA256

      e70d29acac232272c1d2d5f665c6cc63ec07fa005a2b83fe4b261130278c60a6

    • SHA512

      e1ce5d93c9d04a1cace17deafd059f33e380a6e8d7d30a0179cd8006faabb0a6658af6e13d1cd0e56349c20bddcd97af859b494929ae32a7de110ac0efdc0ea7

    • SSDEEP

      3072:XgkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdgbdA4l:SPFkq6zOe5ilSanOAd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks