General

  • Target

    JaffaCakes118_69370b09549fd71dcde9af37be075a030764a0b1f3d332cd8b00eded789d26f6

  • Size

    188KB

  • Sample

    241230-1ymtds1kcj

  • MD5

    b9fb30e25c569ebe58a0d36053ad2352

  • SHA1

    e5d314fe67cae3d3b866e05e35c548a1ad0edf26

  • SHA256

    69370b09549fd71dcde9af37be075a030764a0b1f3d332cd8b00eded789d26f6

  • SHA512

    949bc6b011ef07b248974c36369929b485152173dfc3b0825e5571bbebe9887fba84134bc15f2b33d5dc3e3b075bdef48019aec5c1c78af05b2cf1d5b36ca3cd

  • SSDEEP

    3072:/teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzf9qM:nq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_69370b09549fd71dcde9af37be075a030764a0b1f3d332cd8b00eded789d26f6

    • Size

      188KB

    • MD5

      b9fb30e25c569ebe58a0d36053ad2352

    • SHA1

      e5d314fe67cae3d3b866e05e35c548a1ad0edf26

    • SHA256

      69370b09549fd71dcde9af37be075a030764a0b1f3d332cd8b00eded789d26f6

    • SHA512

      949bc6b011ef07b248974c36369929b485152173dfc3b0825e5571bbebe9887fba84134bc15f2b33d5dc3e3b075bdef48019aec5c1c78af05b2cf1d5b36ca3cd

    • SSDEEP

      3072:/teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzf9qM:nq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks