General

  • Target

    JaffaCakes118_3537d8c94177ba0334ed9088ddf30f30601277af7eb6c241286355cbaeb17f1c

  • Size

    188KB

  • Sample

    241224-l8bfsavkcz

  • MD5

    7cf889c28e360480175e83b4c6ab1122

  • SHA1

    561e51abc3796f60ee06188ea1ad3e3ce23dce20

  • SHA256

    3537d8c94177ba0334ed9088ddf30f30601277af7eb6c241286355cbaeb17f1c

  • SHA512

    51c554fb7565dc9610597e77331b9ecdbf7f7694a42ae11192da08139ac68cd641bebc0b8b34da2618310274df767c981aa0f24d01b44133f1669efe150b1133

  • SSDEEP

    3072:lA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAobo:lzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_3537d8c94177ba0334ed9088ddf30f30601277af7eb6c241286355cbaeb17f1c

    • Size

      188KB

    • MD5

      7cf889c28e360480175e83b4c6ab1122

    • SHA1

      561e51abc3796f60ee06188ea1ad3e3ce23dce20

    • SHA256

      3537d8c94177ba0334ed9088ddf30f30601277af7eb6c241286355cbaeb17f1c

    • SHA512

      51c554fb7565dc9610597e77331b9ecdbf7f7694a42ae11192da08139ac68cd641bebc0b8b34da2618310274df767c981aa0f24d01b44133f1669efe150b1133

    • SSDEEP

      3072:lA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAobo:lzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks