General

  • Target

    JaffaCakes118_fabc53ea354bfa06951e006bdc98ec2ac700e8e17bf3eeac02d32f908ca4692c

  • Size

    188KB

  • Sample

    241230-1g4qkszmbq

  • MD5

    18339108c9cb3c4af8fd90a16d8ba970

  • SHA1

    704a459682dfca6e36a75a69ab1168a3f76f3113

  • SHA256

    fabc53ea354bfa06951e006bdc98ec2ac700e8e17bf3eeac02d32f908ca4692c

  • SHA512

    7d6e37c644a86874fd2f5f8d9f136b8862e9a3d62c70534c742462b625c1a536078e2750c8eb312800e945e9edd90ce39a8d56134dbad75db37372948b9862e5

  • SSDEEP

    3072:MteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzv9qM:wq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_fabc53ea354bfa06951e006bdc98ec2ac700e8e17bf3eeac02d32f908ca4692c

    • Size

      188KB

    • MD5

      18339108c9cb3c4af8fd90a16d8ba970

    • SHA1

      704a459682dfca6e36a75a69ab1168a3f76f3113

    • SHA256

      fabc53ea354bfa06951e006bdc98ec2ac700e8e17bf3eeac02d32f908ca4692c

    • SHA512

      7d6e37c644a86874fd2f5f8d9f136b8862e9a3d62c70534c742462b625c1a536078e2750c8eb312800e945e9edd90ce39a8d56134dbad75db37372948b9862e5

    • SSDEEP

      3072:MteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzv9qM:wq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks