General

  • Target

    JaffaCakes118_aab87aa8493186a7cc2d898ee5cf05955ed05ca89aaf72eb35109eb6f850ed33

  • Size

    188KB

  • Sample

    241224-drj3la1kfm

  • MD5

    85b64c402216e45bc5963d47e0513e8c

  • SHA1

    cfb3fb1707a52197702ba8d53815383e570e31c2

  • SHA256

    aab87aa8493186a7cc2d898ee5cf05955ed05ca89aaf72eb35109eb6f850ed33

  • SHA512

    980906b50b1614a6b636a56721dc3f1e171c521107e1f43b3615bd5229e0177285e71c4006fad7dde12360ebe070d78c30083606a451ae2f79712a55a4363627

  • SSDEEP

    3072:CteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzx9qM:qq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_aab87aa8493186a7cc2d898ee5cf05955ed05ca89aaf72eb35109eb6f850ed33

    • Size

      188KB

    • MD5

      85b64c402216e45bc5963d47e0513e8c

    • SHA1

      cfb3fb1707a52197702ba8d53815383e570e31c2

    • SHA256

      aab87aa8493186a7cc2d898ee5cf05955ed05ca89aaf72eb35109eb6f850ed33

    • SHA512

      980906b50b1614a6b636a56721dc3f1e171c521107e1f43b3615bd5229e0177285e71c4006fad7dde12360ebe070d78c30083606a451ae2f79712a55a4363627

    • SSDEEP

      3072:CteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzx9qM:qq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks