General

  • Target

    JaffaCakes118_f27b9d38840097ee3cd3bf4f9adefc4ecef7cdea7d3d14226cfafbef2e2aae0f

  • Size

    188KB

  • Sample

    241230-2j72fsskbp

  • MD5

    3625d13785cfd88721c4ac26afc837cf

  • SHA1

    afaa70d15a9914b3bd212887697d0b44eff7120e

  • SHA256

    f27b9d38840097ee3cd3bf4f9adefc4ecef7cdea7d3d14226cfafbef2e2aae0f

  • SHA512

    e6693574c776baca3a40b57b34b99bf15c67a2a594eb7490a7a99282fb78fd7b2234ea3dc6bebe6cf2e91c612a0e3b0e521b5802c9f3811c34c362cb6c1e06cc

  • SSDEEP

    3072:7teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzq9qM:Tq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_f27b9d38840097ee3cd3bf4f9adefc4ecef7cdea7d3d14226cfafbef2e2aae0f

    • Size

      188KB

    • MD5

      3625d13785cfd88721c4ac26afc837cf

    • SHA1

      afaa70d15a9914b3bd212887697d0b44eff7120e

    • SHA256

      f27b9d38840097ee3cd3bf4f9adefc4ecef7cdea7d3d14226cfafbef2e2aae0f

    • SHA512

      e6693574c776baca3a40b57b34b99bf15c67a2a594eb7490a7a99282fb78fd7b2234ea3dc6bebe6cf2e91c612a0e3b0e521b5802c9f3811c34c362cb6c1e06cc

    • SSDEEP

      3072:7teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzq9qM:Tq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks