General

  • Target

    JaffaCakes118_980d0ba5a7927b645d93e5b9f88fc956ca85dd4da7e459be81baa965acff3e67

  • Size

    188KB

  • Sample

    241224-bybzfsyjdr

  • MD5

    a44939803ee8004725c735244525281b

  • SHA1

    6807617ffdf9b8d184d6686627100cacb3b6267a

  • SHA256

    980d0ba5a7927b645d93e5b9f88fc956ca85dd4da7e459be81baa965acff3e67

  • SHA512

    48348bdad234c4dd3242b54b5c6634c2701fac09d9a8466a45b55678881e48714685e2b5f9d1a689349f342806568aee5facddb9f3585e0479fa9fc1362f1031

  • SSDEEP

    3072:uteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz59qM:Gq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_980d0ba5a7927b645d93e5b9f88fc956ca85dd4da7e459be81baa965acff3e67

    • Size

      188KB

    • MD5

      a44939803ee8004725c735244525281b

    • SHA1

      6807617ffdf9b8d184d6686627100cacb3b6267a

    • SHA256

      980d0ba5a7927b645d93e5b9f88fc956ca85dd4da7e459be81baa965acff3e67

    • SHA512

      48348bdad234c4dd3242b54b5c6634c2701fac09d9a8466a45b55678881e48714685e2b5f9d1a689349f342806568aee5facddb9f3585e0479fa9fc1362f1031

    • SSDEEP

      3072:uteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz59qM:Gq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks