General

  • Target

    JaffaCakes118_6a36b24633c173a96bb2539fb28e940faea2aad5ac04111eb9877db6e3d25495

  • Size

    188KB

  • Sample

    241230-2d1ees1raq

  • MD5

    e5e731a0fe989e2908ed8ef013dbecb8

  • SHA1

    149ad83ab7caff9fbf009f5eaa91c69f18b191db

  • SHA256

    6a36b24633c173a96bb2539fb28e940faea2aad5ac04111eb9877db6e3d25495

  • SHA512

    e6c594ed6fe6aa8be92122feceb4cbfabea0d1f3214ea9490f37b736c124c27e9e3f9e7e0814f26c805f18f71cfeeb3ee696dce06dd3deba3d2eb55b6120c176

  • SSDEEP

    3072:lteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz/9qM:hq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_6a36b24633c173a96bb2539fb28e940faea2aad5ac04111eb9877db6e3d25495

    • Size

      188KB

    • MD5

      e5e731a0fe989e2908ed8ef013dbecb8

    • SHA1

      149ad83ab7caff9fbf009f5eaa91c69f18b191db

    • SHA256

      6a36b24633c173a96bb2539fb28e940faea2aad5ac04111eb9877db6e3d25495

    • SHA512

      e6c594ed6fe6aa8be92122feceb4cbfabea0d1f3214ea9490f37b736c124c27e9e3f9e7e0814f26c805f18f71cfeeb3ee696dce06dd3deba3d2eb55b6120c176

    • SSDEEP

      3072:lteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz/9qM:hq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks