General

  • Target

    JaffaCakes118_4add59cd04b7ad5c22e5119eda6d4f25dbbeeae530ab7f5b1ca123546220fc92

  • Size

    188KB

  • Sample

    241224-dbeg6szphp

  • MD5

    7e79a31e6b68cabcbb1b0b850e964a34

  • SHA1

    2a6867b481281cce703b872b504a1149bff55ecf

  • SHA256

    4add59cd04b7ad5c22e5119eda6d4f25dbbeeae530ab7f5b1ca123546220fc92

  • SHA512

    37bcc54ee1d8e44268986c93ffa0c28619e9b1f0d8524e5253685376e7e0151752bc302e6ca1a2e2265b5fb4864488dc88e63fff2ca0618ff6f05b78448adf8a

  • SSDEEP

    3072:LteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzU9qM:Dq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_4add59cd04b7ad5c22e5119eda6d4f25dbbeeae530ab7f5b1ca123546220fc92

    • Size

      188KB

    • MD5

      7e79a31e6b68cabcbb1b0b850e964a34

    • SHA1

      2a6867b481281cce703b872b504a1149bff55ecf

    • SHA256

      4add59cd04b7ad5c22e5119eda6d4f25dbbeeae530ab7f5b1ca123546220fc92

    • SHA512

      37bcc54ee1d8e44268986c93ffa0c28619e9b1f0d8524e5253685376e7e0151752bc302e6ca1a2e2265b5fb4864488dc88e63fff2ca0618ff6f05b78448adf8a

    • SSDEEP

      3072:LteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzU9qM:Dq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks