General

  • Target

    JaffaCakes118_9f21c5a4559cefa62301858362c813790abded1714972244afd5dbd09ce95184

  • Size

    188KB

  • Sample

    241224-mewejavlfy

  • MD5

    3591dee8b831bede665beefc0e368839

  • SHA1

    a310d1720faf42ffdcd56ba7b41932889cbc6db8

  • SHA256

    9f21c5a4559cefa62301858362c813790abded1714972244afd5dbd09ce95184

  • SHA512

    3ebd7a94a3199e8424a37e7b0fd61f888752558752308331b3341a5f847f82b4aa7b677cf00dc758457e8a3a135a7af8c9ffe30905c4e6bad81d0b5f422b899f

  • SSDEEP

    3072:fteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzM9qM:Hq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_9f21c5a4559cefa62301858362c813790abded1714972244afd5dbd09ce95184

    • Size

      188KB

    • MD5

      3591dee8b831bede665beefc0e368839

    • SHA1

      a310d1720faf42ffdcd56ba7b41932889cbc6db8

    • SHA256

      9f21c5a4559cefa62301858362c813790abded1714972244afd5dbd09ce95184

    • SHA512

      3ebd7a94a3199e8424a37e7b0fd61f888752558752308331b3341a5f847f82b4aa7b677cf00dc758457e8a3a135a7af8c9ffe30905c4e6bad81d0b5f422b899f

    • SSDEEP

      3072:fteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzM9qM:Hq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks