General

  • Target

    JaffaCakes118_c774413f0fa238ac2d32cc418a2ce86a9b239e9ee0a44819d3387ce1c53f98b0

  • Size

    188KB

  • Sample

    241230-1dfjkszkgp

  • MD5

    79828ac2ccfc0388d62e630b172ece68

  • SHA1

    07a7303a9039049ea417bfba20e52c215758fcb0

  • SHA256

    c774413f0fa238ac2d32cc418a2ce86a9b239e9ee0a44819d3387ce1c53f98b0

  • SHA512

    914cf50d92198f37621ebc0da47cbd3bf4dec9a15c7a6060733ac28821c0d522629868384a7643086f4ca9883536a2caff2167825caf648f23f873a97b56b37b

  • SSDEEP

    3072:xA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoMo:xzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_c774413f0fa238ac2d32cc418a2ce86a9b239e9ee0a44819d3387ce1c53f98b0

    • Size

      188KB

    • MD5

      79828ac2ccfc0388d62e630b172ece68

    • SHA1

      07a7303a9039049ea417bfba20e52c215758fcb0

    • SHA256

      c774413f0fa238ac2d32cc418a2ce86a9b239e9ee0a44819d3387ce1c53f98b0

    • SHA512

      914cf50d92198f37621ebc0da47cbd3bf4dec9a15c7a6060733ac28821c0d522629868384a7643086f4ca9883536a2caff2167825caf648f23f873a97b56b37b

    • SSDEEP

      3072:xA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoMo:xzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks