General

  • Target

    JaffaCakes118_7d7a4e014a60adcdaa8d7218ff3c2d97a03680daf6d563f8eca9914e43147470

  • Size

    188KB

  • Sample

    241224-naxbpswncl

  • MD5

    22079358d1c7ffa9f7846ff39efc1dd8

  • SHA1

    d75c7af12e377b9652a72af2e8601c972a665be5

  • SHA256

    7d7a4e014a60adcdaa8d7218ff3c2d97a03680daf6d563f8eca9914e43147470

  • SHA512

    fa7844771e52796944bbfe3269b9497020ab9ae1869f01e26a2adbba2936a4bf4f86f1694e89dd8f284da62630b31dd930edc48ae219d01bfb975d1065cbf795

  • SSDEEP

    3072:jteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzz9qM:Lq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_7d7a4e014a60adcdaa8d7218ff3c2d97a03680daf6d563f8eca9914e43147470

    • Size

      188KB

    • MD5

      22079358d1c7ffa9f7846ff39efc1dd8

    • SHA1

      d75c7af12e377b9652a72af2e8601c972a665be5

    • SHA256

      7d7a4e014a60adcdaa8d7218ff3c2d97a03680daf6d563f8eca9914e43147470

    • SHA512

      fa7844771e52796944bbfe3269b9497020ab9ae1869f01e26a2adbba2936a4bf4f86f1694e89dd8f284da62630b31dd930edc48ae219d01bfb975d1065cbf795

    • SSDEEP

      3072:jteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzz9qM:Lq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks