General

  • Target

    JaffaCakes118_28574954f6ba1d010dba59fb35397cc50065453830a867cd1befec4aad0d61de

  • Size

    188KB

  • Sample

    241224-mxhamavqew

  • MD5

    dd47933b01020336ab5e7bc0235bd95e

  • SHA1

    ab0a122e30c51394e63da2c067f334ab3a09d374

  • SHA256

    28574954f6ba1d010dba59fb35397cc50065453830a867cd1befec4aad0d61de

  • SHA512

    25daaf1d6d0c87afda5f0a4646d86eee3fc0f47305544dababdb09fbfdb2f469ca88766dc4858deb6285eaa880bfc6407c589a4a5ad4e128068cc9a483c6257c

  • SSDEEP

    3072:hteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzY9qM:tq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_28574954f6ba1d010dba59fb35397cc50065453830a867cd1befec4aad0d61de

    • Size

      188KB

    • MD5

      dd47933b01020336ab5e7bc0235bd95e

    • SHA1

      ab0a122e30c51394e63da2c067f334ab3a09d374

    • SHA256

      28574954f6ba1d010dba59fb35397cc50065453830a867cd1befec4aad0d61de

    • SHA512

      25daaf1d6d0c87afda5f0a4646d86eee3fc0f47305544dababdb09fbfdb2f469ca88766dc4858deb6285eaa880bfc6407c589a4a5ad4e128068cc9a483c6257c

    • SSDEEP

      3072:hteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzY9qM:tq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks