General

  • Target

    JaffaCakes118_753618e440302a933f66f626b8a39c510bfff00446241fce4a655be089c20998

  • Size

    188KB

  • Sample

    241224-mgtnqavmcx

  • MD5

    e91c9a5c959c38c43bede6916ebc3722

  • SHA1

    42451ccc899dddcab8e6be3934e4d8a288bcc4a0

  • SHA256

    753618e440302a933f66f626b8a39c510bfff00446241fce4a655be089c20998

  • SHA512

    5b9c2b0bd0c5778eda524a6aaea056eabca79c58d24c12c15e9965c09c76f2b82b6cd67ec92d8a2eb31ed8b6d12b4e4c35cc3f75c4417b2915960c09beb4f09b

  • SSDEEP

    3072:KteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzn9qM:iq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_753618e440302a933f66f626b8a39c510bfff00446241fce4a655be089c20998

    • Size

      188KB

    • MD5

      e91c9a5c959c38c43bede6916ebc3722

    • SHA1

      42451ccc899dddcab8e6be3934e4d8a288bcc4a0

    • SHA256

      753618e440302a933f66f626b8a39c510bfff00446241fce4a655be089c20998

    • SHA512

      5b9c2b0bd0c5778eda524a6aaea056eabca79c58d24c12c15e9965c09c76f2b82b6cd67ec92d8a2eb31ed8b6d12b4e4c35cc3f75c4417b2915960c09beb4f09b

    • SSDEEP

      3072:KteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzn9qM:iq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks