General

  • Target

    JaffaCakes118_258015fd6cd1574a7b618bacfe6f30459dfe8a908e6f11e8a6caf6d854c60f88

  • Size

    188KB

  • Sample

    241224-mvag1avrhl

  • MD5

    0dcbb6a2daebc89bd05abf2343369595

  • SHA1

    562a1260ba9e443944e11be5e96566b4801cf33a

  • SHA256

    258015fd6cd1574a7b618bacfe6f30459dfe8a908e6f11e8a6caf6d854c60f88

  • SHA512

    5a0608e7a413378de383b3c6cf9e309a723097d5997e43149d52a44fc273de6ddc80d2aa9b7b943396004294e8cf0a34d728e71bcf77b04ed36c7a5c8012bba4

  • SSDEEP

    3072:xteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzy9qM:dq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_258015fd6cd1574a7b618bacfe6f30459dfe8a908e6f11e8a6caf6d854c60f88

    • Size

      188KB

    • MD5

      0dcbb6a2daebc89bd05abf2343369595

    • SHA1

      562a1260ba9e443944e11be5e96566b4801cf33a

    • SHA256

      258015fd6cd1574a7b618bacfe6f30459dfe8a908e6f11e8a6caf6d854c60f88

    • SHA512

      5a0608e7a413378de383b3c6cf9e309a723097d5997e43149d52a44fc273de6ddc80d2aa9b7b943396004294e8cf0a34d728e71bcf77b04ed36c7a5c8012bba4

    • SSDEEP

      3072:xteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzy9qM:dq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks