General

  • Target

    JaffaCakes118_e4bfe2ed643ec9b12a1075db206f3ee462069a5743046227e87c910e460a68e5

  • Size

    188KB

  • Sample

    241224-dkevaszpfx

  • MD5

    11b94a2046fcc552bc543c62aec89d06

  • SHA1

    fe4a292e915da7ea3db8916e69393d4bdcae0f05

  • SHA256

    e4bfe2ed643ec9b12a1075db206f3ee462069a5743046227e87c910e460a68e5

  • SHA512

    3da213a24e7eee60206995cdae4164f0f3356dbdb2d95c7a3e8abad09d2da3f78a46bff19079c6e89c182d914c654a6fafc555e72b104435fd0b048539d8d2b9

  • SSDEEP

    3072:LteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzf9qM:Dq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_e4bfe2ed643ec9b12a1075db206f3ee462069a5743046227e87c910e460a68e5

    • Size

      188KB

    • MD5

      11b94a2046fcc552bc543c62aec89d06

    • SHA1

      fe4a292e915da7ea3db8916e69393d4bdcae0f05

    • SHA256

      e4bfe2ed643ec9b12a1075db206f3ee462069a5743046227e87c910e460a68e5

    • SHA512

      3da213a24e7eee60206995cdae4164f0f3356dbdb2d95c7a3e8abad09d2da3f78a46bff19079c6e89c182d914c654a6fafc555e72b104435fd0b048539d8d2b9

    • SSDEEP

      3072:LteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzf9qM:Dq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks