General

  • Target

    JaffaCakes118_07371006bba59b1fdd8a3bbd0fa5fb12fa1b5638476d9edc6b4447783a4c6eda

  • Size

    188KB

  • Sample

    241230-2e76navkfv

  • MD5

    15d3683a571516a43895cc28a0cd5f32

  • SHA1

    afa0eb7f47a27d3f0cc57568a3bbff8cc7f4cc39

  • SHA256

    07371006bba59b1fdd8a3bbd0fa5fb12fa1b5638476d9edc6b4447783a4c6eda

  • SHA512

    63027cb62895d53376d18904b0e1fc907cdf5690d80b25b9f2136cd018d1b9f46f92022521287e3dd043a6cb50ede64f1d7ea529b2c09cfadb2c9192f2e7f025

  • SSDEEP

    3072:tteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzl9qM:Zq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_07371006bba59b1fdd8a3bbd0fa5fb12fa1b5638476d9edc6b4447783a4c6eda

    • Size

      188KB

    • MD5

      15d3683a571516a43895cc28a0cd5f32

    • SHA1

      afa0eb7f47a27d3f0cc57568a3bbff8cc7f4cc39

    • SHA256

      07371006bba59b1fdd8a3bbd0fa5fb12fa1b5638476d9edc6b4447783a4c6eda

    • SHA512

      63027cb62895d53376d18904b0e1fc907cdf5690d80b25b9f2136cd018d1b9f46f92022521287e3dd043a6cb50ede64f1d7ea529b2c09cfadb2c9192f2e7f025

    • SSDEEP

      3072:tteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzl9qM:Zq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks