General

  • Target

    JaffaCakes118_007400232deac3f45e2ac53f54e600d7c2fe5425c712d8fd1b759af46af8d148

  • Size

    188KB

  • Sample

    241224-mbnwaavmgj

  • MD5

    d4e23df103e9ef4f4095b8c410fed8d8

  • SHA1

    630d4a4ba941718922d8b3a765a3ceec3f52c0f1

  • SHA256

    007400232deac3f45e2ac53f54e600d7c2fe5425c712d8fd1b759af46af8d148

  • SHA512

    9a1d7d5beb2e454a99c29fe90720f9580c2be1c980e3b19056d637dd9836cf70318e708e9dc1bb0949071adce15138429b680bbc5a89d5611ae6b41802b1636a

  • SSDEEP

    3072:0teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzl9qM:Iq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_007400232deac3f45e2ac53f54e600d7c2fe5425c712d8fd1b759af46af8d148

    • Size

      188KB

    • MD5

      d4e23df103e9ef4f4095b8c410fed8d8

    • SHA1

      630d4a4ba941718922d8b3a765a3ceec3f52c0f1

    • SHA256

      007400232deac3f45e2ac53f54e600d7c2fe5425c712d8fd1b759af46af8d148

    • SHA512

      9a1d7d5beb2e454a99c29fe90720f9580c2be1c980e3b19056d637dd9836cf70318e708e9dc1bb0949071adce15138429b680bbc5a89d5611ae6b41802b1636a

    • SSDEEP

      3072:0teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzl9qM:Iq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks