General

  • Target

    JaffaCakes118_b6dfee3ed22bcf912c09b6eb6a38f3a22b8d891dd36e0d18c774f20085e3a70d

  • Size

    188KB

  • Sample

    241230-2ffg2avkgt

  • MD5

    1bcac41f1b30397f6c8ad24ff7456a11

  • SHA1

    8c9ba27eace7c7e037f04dc1f3129b90cd45cb35

  • SHA256

    b6dfee3ed22bcf912c09b6eb6a38f3a22b8d891dd36e0d18c774f20085e3a70d

  • SHA512

    6bfad4ecdcb8a829283588753135f7561062e72a890dc22795ee1c03a4fd1134ca1fdc458fc3a00f93a65ce720908b25bfeb2f2aff5056c70e444093ff8a8b8f

  • SSDEEP

    3072:TteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzD9qM:bq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_b6dfee3ed22bcf912c09b6eb6a38f3a22b8d891dd36e0d18c774f20085e3a70d

    • Size

      188KB

    • MD5

      1bcac41f1b30397f6c8ad24ff7456a11

    • SHA1

      8c9ba27eace7c7e037f04dc1f3129b90cd45cb35

    • SHA256

      b6dfee3ed22bcf912c09b6eb6a38f3a22b8d891dd36e0d18c774f20085e3a70d

    • SHA512

      6bfad4ecdcb8a829283588753135f7561062e72a890dc22795ee1c03a4fd1134ca1fdc458fc3a00f93a65ce720908b25bfeb2f2aff5056c70e444093ff8a8b8f

    • SSDEEP

      3072:TteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzD9qM:bq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks