General

  • Target

    JaffaCakes118_fb2cb8528e181f2a9a9904e8055e91f77643f57c2094626e81a9db7c76532d57

  • Size

    188KB

  • Sample

    241224-mzl2lawkcm

  • MD5

    a4661c91d78cbfafa930c1e4647ceb5c

  • SHA1

    803789efc1b0f119f403caee4bbde0e80bc2ab5f

  • SHA256

    fb2cb8528e181f2a9a9904e8055e91f77643f57c2094626e81a9db7c76532d57

  • SHA512

    ec91c3aebe4feb432a87ce997d9b7d890153a424a1222162ce2f38395e1ce84a02a21326103940841aed14ab7f945083d4383458365892d23e54c59a02c10ecf

  • SSDEEP

    3072:FteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzq9qM:Bq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_fb2cb8528e181f2a9a9904e8055e91f77643f57c2094626e81a9db7c76532d57

    • Size

      188KB

    • MD5

      a4661c91d78cbfafa930c1e4647ceb5c

    • SHA1

      803789efc1b0f119f403caee4bbde0e80bc2ab5f

    • SHA256

      fb2cb8528e181f2a9a9904e8055e91f77643f57c2094626e81a9db7c76532d57

    • SHA512

      ec91c3aebe4feb432a87ce997d9b7d890153a424a1222162ce2f38395e1ce84a02a21326103940841aed14ab7f945083d4383458365892d23e54c59a02c10ecf

    • SSDEEP

      3072:FteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzq9qM:Bq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks