General

  • Target

    JaffaCakes118_359309bd6a052db5a81ec8b5d12ef4865483ee3e0675d2294efb03ee75c344cf

  • Size

    188KB

  • Sample

    241224-cm8dysyraq

  • MD5

    b3b1afc7473f8c964c3aa02e2aa62427

  • SHA1

    415447047dab053c37b7829fe2a62f045f56e55b

  • SHA256

    359309bd6a052db5a81ec8b5d12ef4865483ee3e0675d2294efb03ee75c344cf

  • SHA512

    8efa7f7a31d04460d42b9d6e13a80ea0aeba90d7dfd55305474ab65ea27d3edafcceb2e58c100259e5e216bf960d44acb3a013adab8511067a287f782d3b93dc

  • SSDEEP

    3072:pteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzd9qM:lq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_359309bd6a052db5a81ec8b5d12ef4865483ee3e0675d2294efb03ee75c344cf

    • Size

      188KB

    • MD5

      b3b1afc7473f8c964c3aa02e2aa62427

    • SHA1

      415447047dab053c37b7829fe2a62f045f56e55b

    • SHA256

      359309bd6a052db5a81ec8b5d12ef4865483ee3e0675d2294efb03ee75c344cf

    • SHA512

      8efa7f7a31d04460d42b9d6e13a80ea0aeba90d7dfd55305474ab65ea27d3edafcceb2e58c100259e5e216bf960d44acb3a013adab8511067a287f782d3b93dc

    • SSDEEP

      3072:pteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzd9qM:lq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks