General

  • Target

    JaffaCakes118_150dbbe602a8f2cdd1d1d49e6ebd09c70c9ba2eb77ed1ef1d83b7d7f3f327a3a

  • Size

    184KB

  • Sample

    241230-1w1bps1jdl

  • MD5

    7c28450872495d2e94395277acfb2293

  • SHA1

    2192412d9a73a00544fbb951c4ddf58ec38bdaae

  • SHA256

    150dbbe602a8f2cdd1d1d49e6ebd09c70c9ba2eb77ed1ef1d83b7d7f3f327a3a

  • SHA512

    0123970c38dea0124b748a4f6533fc1e8096e70d80b32b322b55ab104e63557f19a0f7e3550bd5cdfac495f5e22221bc42cfe3592318051b470397f0010c338a

  • SSDEEP

    3072:wBuwfhNXphcqs2tJYsoa9Xibolk0CtPBU1jhhF8ZJ8fDo4K/lmsb:27TXYsd9SkONU1jKGlclm

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_150dbbe602a8f2cdd1d1d49e6ebd09c70c9ba2eb77ed1ef1d83b7d7f3f327a3a

    • Size

      184KB

    • MD5

      7c28450872495d2e94395277acfb2293

    • SHA1

      2192412d9a73a00544fbb951c4ddf58ec38bdaae

    • SHA256

      150dbbe602a8f2cdd1d1d49e6ebd09c70c9ba2eb77ed1ef1d83b7d7f3f327a3a

    • SHA512

      0123970c38dea0124b748a4f6533fc1e8096e70d80b32b322b55ab104e63557f19a0f7e3550bd5cdfac495f5e22221bc42cfe3592318051b470397f0010c338a

    • SSDEEP

      3072:wBuwfhNXphcqs2tJYsoa9Xibolk0CtPBU1jhhF8ZJ8fDo4K/lmsb:27TXYsd9SkONU1jKGlclm

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks