General

  • Target

    JaffaCakes118_d895a636106b87e3b6aa347bea837edd8e78286985b0067a169ee45c080b55cd

  • Size

    188KB

  • Sample

    241224-m5qlzawlgk

  • MD5

    8bd93801aa9878fa0905be4acc38e821

  • SHA1

    5a5dccad4d5998f65e9e0734854569d0da4c610c

  • SHA256

    d895a636106b87e3b6aa347bea837edd8e78286985b0067a169ee45c080b55cd

  • SHA512

    074f8cda8f89240be6d47f689994051081ee44bc85d77b2d3c79638ed56241077f1fec68b604ee6b24498d253d59bf2599f3c83ce833a712bf0a1eca5ee84ead

  • SSDEEP

    3072:YteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzS9qM:cq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_d895a636106b87e3b6aa347bea837edd8e78286985b0067a169ee45c080b55cd

    • Size

      188KB

    • MD5

      8bd93801aa9878fa0905be4acc38e821

    • SHA1

      5a5dccad4d5998f65e9e0734854569d0da4c610c

    • SHA256

      d895a636106b87e3b6aa347bea837edd8e78286985b0067a169ee45c080b55cd

    • SHA512

      074f8cda8f89240be6d47f689994051081ee44bc85d77b2d3c79638ed56241077f1fec68b604ee6b24498d253d59bf2599f3c83ce833a712bf0a1eca5ee84ead

    • SSDEEP

      3072:YteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzS9qM:cq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks