General

  • Target

    JaffaCakes118_2d91fb96de583ae12df9087c9a81d40a9e7f6e30016565e7db23dab1900424ea

  • Size

    188KB

  • Sample

    241224-lbkcestmfv

  • MD5

    3bbe5eac6f9b385e200a541ad20843f0

  • SHA1

    fd42cdc3d52fe6426671a414041158d66cdce310

  • SHA256

    2d91fb96de583ae12df9087c9a81d40a9e7f6e30016565e7db23dab1900424ea

  • SHA512

    e9ed06c716ad635d9df64962dac4640baab607bfaf04becfdffefb39ae1cd3b7c5e93fa23f77d56a1348f0b8c06191fefeefed72ac0cce74d5940b137ddf87ec

  • SSDEEP

    3072:TteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzY9qM:bq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_2d91fb96de583ae12df9087c9a81d40a9e7f6e30016565e7db23dab1900424ea

    • Size

      188KB

    • MD5

      3bbe5eac6f9b385e200a541ad20843f0

    • SHA1

      fd42cdc3d52fe6426671a414041158d66cdce310

    • SHA256

      2d91fb96de583ae12df9087c9a81d40a9e7f6e30016565e7db23dab1900424ea

    • SHA512

      e9ed06c716ad635d9df64962dac4640baab607bfaf04becfdffefb39ae1cd3b7c5e93fa23f77d56a1348f0b8c06191fefeefed72ac0cce74d5940b137ddf87ec

    • SSDEEP

      3072:TteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzY9qM:bq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks