General

  • Target

    JaffaCakes118_461485607f566b7f0d48855caad17615f9e3f01315d8282cfb5ad196ad901f1a

  • Size

    188KB

  • Sample

    241224-bxj9faxqc1

  • MD5

    dcc3aa55b083642c9b3d509644896762

  • SHA1

    93cfcf9011abee62b80d335041ca062e9b29c7d5

  • SHA256

    461485607f566b7f0d48855caad17615f9e3f01315d8282cfb5ad196ad901f1a

  • SHA512

    662803bd1499c21c551746787d7eae9873b43b8a55ad1ccbe6797549ec4a0bf7448060fad44f4e8365d895bea32255532d86a773b319780efa4ed43e2aa63bbc

  • SSDEEP

    3072:MteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzQ9qM:wq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_461485607f566b7f0d48855caad17615f9e3f01315d8282cfb5ad196ad901f1a

    • Size

      188KB

    • MD5

      dcc3aa55b083642c9b3d509644896762

    • SHA1

      93cfcf9011abee62b80d335041ca062e9b29c7d5

    • SHA256

      461485607f566b7f0d48855caad17615f9e3f01315d8282cfb5ad196ad901f1a

    • SHA512

      662803bd1499c21c551746787d7eae9873b43b8a55ad1ccbe6797549ec4a0bf7448060fad44f4e8365d895bea32255532d86a773b319780efa4ed43e2aa63bbc

    • SSDEEP

      3072:MteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzQ9qM:wq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks