General

  • Target

    JaffaCakes118_1d7f2367942e8839b05f2e44f3211c1ae8e081b8529b6879912e3a20d70946ec

  • Size

    188KB

  • Sample

    241230-18t1fs1nhq

  • MD5

    0ccff35958eea8030c4ea533b06d46fe

  • SHA1

    2f9ac320f791ce808a2d2327bd7a408bba6bf7dc

  • SHA256

    1d7f2367942e8839b05f2e44f3211c1ae8e081b8529b6879912e3a20d70946ec

  • SHA512

    f02bdc307971b3b799a05e9bc5ee071da7de55f852960fdab3d30da6de70e2ec63c045c197c40ad4527a4dceb1b22a8da84f9d9565bd86d4a05157e851e9d136

  • SSDEEP

    3072:KteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzp9qM:iq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_1d7f2367942e8839b05f2e44f3211c1ae8e081b8529b6879912e3a20d70946ec

    • Size

      188KB

    • MD5

      0ccff35958eea8030c4ea533b06d46fe

    • SHA1

      2f9ac320f791ce808a2d2327bd7a408bba6bf7dc

    • SHA256

      1d7f2367942e8839b05f2e44f3211c1ae8e081b8529b6879912e3a20d70946ec

    • SHA512

      f02bdc307971b3b799a05e9bc5ee071da7de55f852960fdab3d30da6de70e2ec63c045c197c40ad4527a4dceb1b22a8da84f9d9565bd86d4a05157e851e9d136

    • SSDEEP

      3072:KteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzp9qM:iq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks