General

  • Target

    JaffaCakes118_4c69e36a9d11b595c7521b05da88f0bee2c0a1690e93b3fdff4cb61dce18f111

  • Size

    188KB

  • Sample

    241224-lyltrstrhz

  • MD5

    92f11bce5b1783488610261b620af6d5

  • SHA1

    0c91917146e4fd337f679cc8273db17b30850536

  • SHA256

    4c69e36a9d11b595c7521b05da88f0bee2c0a1690e93b3fdff4cb61dce18f111

  • SHA512

    2c4076fcacfc299f874872ecbbc1e5726bdc36b7c7d93831368e5097eabe12013ae61af1fa3c0e648717d09f6d55125c641c50bfadad905f72e218d65ceee37f

  • SSDEEP

    3072:CteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzR9qM:qq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_4c69e36a9d11b595c7521b05da88f0bee2c0a1690e93b3fdff4cb61dce18f111

    • Size

      188KB

    • MD5

      92f11bce5b1783488610261b620af6d5

    • SHA1

      0c91917146e4fd337f679cc8273db17b30850536

    • SHA256

      4c69e36a9d11b595c7521b05da88f0bee2c0a1690e93b3fdff4cb61dce18f111

    • SHA512

      2c4076fcacfc299f874872ecbbc1e5726bdc36b7c7d93831368e5097eabe12013ae61af1fa3c0e648717d09f6d55125c641c50bfadad905f72e218d65ceee37f

    • SSDEEP

      3072:CteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzR9qM:qq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks