General

  • Target

    JaffaCakes118_62f2ec9fddb623d1288a01279e8c96c51e354d5851833fc5f871947e74da5f51

  • Size

    188KB

  • Sample

    241230-2gyp1avlcw

  • MD5

    0e7635cb5826def441a2985bc77f0d22

  • SHA1

    3dbbe9494f68e93efd0f8faabd306a27b51d0856

  • SHA256

    62f2ec9fddb623d1288a01279e8c96c51e354d5851833fc5f871947e74da5f51

  • SHA512

    398a1be2113881b8f6cecc1cb0f7e23883eca629b551e47ce6f8553b877dc6d6049594d809a61c992e8cebfae59608b3cd59b243c4a6d33777c996700c744f1a

  • SSDEEP

    3072:YteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzl9qM:cq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_62f2ec9fddb623d1288a01279e8c96c51e354d5851833fc5f871947e74da5f51

    • Size

      188KB

    • MD5

      0e7635cb5826def441a2985bc77f0d22

    • SHA1

      3dbbe9494f68e93efd0f8faabd306a27b51d0856

    • SHA256

      62f2ec9fddb623d1288a01279e8c96c51e354d5851833fc5f871947e74da5f51

    • SHA512

      398a1be2113881b8f6cecc1cb0f7e23883eca629b551e47ce6f8553b877dc6d6049594d809a61c992e8cebfae59608b3cd59b243c4a6d33777c996700c744f1a

    • SSDEEP

      3072:YteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzl9qM:cq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks