General

  • Target

    JaffaCakes118_f4d2c87acf691697ed9a8716be11e77449b3563259a8245cb17173c78c571638

  • Size

    188KB

  • Sample

    241224-dbxnrazqbj

  • MD5

    4862a558d5e704196f20335ef22074de

  • SHA1

    138bd79bada2b74f76ee971e8e9fde6b3f358ac5

  • SHA256

    f4d2c87acf691697ed9a8716be11e77449b3563259a8245cb17173c78c571638

  • SHA512

    23e1cad9c8a31d24a4cb357e07ff4152bbf113eee9384ad119303d837c25bf1732228770631a3164594d1984210fc17cb149bb23ccd34f7cec4e5f664c34fd5d

  • SSDEEP

    3072:9teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz29qM:Jq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_f4d2c87acf691697ed9a8716be11e77449b3563259a8245cb17173c78c571638

    • Size

      188KB

    • MD5

      4862a558d5e704196f20335ef22074de

    • SHA1

      138bd79bada2b74f76ee971e8e9fde6b3f358ac5

    • SHA256

      f4d2c87acf691697ed9a8716be11e77449b3563259a8245cb17173c78c571638

    • SHA512

      23e1cad9c8a31d24a4cb357e07ff4152bbf113eee9384ad119303d837c25bf1732228770631a3164594d1984210fc17cb149bb23ccd34f7cec4e5f664c34fd5d

    • SSDEEP

      3072:9teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz29qM:Jq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks