General

  • Target

    JaffaCakes118_3402927f8ecf2ddff8dd5ddf27eaee9cb673cee61c97e5d2b0e3ba8272a62790

  • Size

    188KB

  • Sample

    241230-22mhgawjgw

  • MD5

    5659ccd112fdfbed423254ce24b0e7dc

  • SHA1

    2829d8b055a1599d938079ece5f19478b66a1b62

  • SHA256

    3402927f8ecf2ddff8dd5ddf27eaee9cb673cee61c97e5d2b0e3ba8272a62790

  • SHA512

    f432e77ae65d45d80b6237be08a76c16aa8fba7ab68b8a38de9298fef01c44335c336188b315200c1e98df8265f5a9ec79cb7a0ff9cdde0d21a59b01b27520c0

  • SSDEEP

    3072:ateMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzA9qM:Sq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_3402927f8ecf2ddff8dd5ddf27eaee9cb673cee61c97e5d2b0e3ba8272a62790

    • Size

      188KB

    • MD5

      5659ccd112fdfbed423254ce24b0e7dc

    • SHA1

      2829d8b055a1599d938079ece5f19478b66a1b62

    • SHA256

      3402927f8ecf2ddff8dd5ddf27eaee9cb673cee61c97e5d2b0e3ba8272a62790

    • SHA512

      f432e77ae65d45d80b6237be08a76c16aa8fba7ab68b8a38de9298fef01c44335c336188b315200c1e98df8265f5a9ec79cb7a0ff9cdde0d21a59b01b27520c0

    • SSDEEP

      3072:ateMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzA9qM:Sq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks