General

  • Target

    JaffaCakes118_90d35900f54bc98fb53b8e057a24a5b32177ca1b0e52ff48672cfeb221901a17

  • Size

    188KB

  • Sample

    241230-2jsa1askal

  • MD5

    7af33a08d5be946c4b66c72b51e7c11d

  • SHA1

    f626405e2fded14f21fe331ea1655dacf9393ce9

  • SHA256

    90d35900f54bc98fb53b8e057a24a5b32177ca1b0e52ff48672cfeb221901a17

  • SHA512

    a13e42d9a914763bfc5d86463e7a51b0a6061e5b7a60776ab4fad79ed10469029482a376e123829eeeba9ca2192f103527b3c3dd0cc7dbaa41ae989580605d3f

  • SSDEEP

    3072:DteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzo9qM:rq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_90d35900f54bc98fb53b8e057a24a5b32177ca1b0e52ff48672cfeb221901a17

    • Size

      188KB

    • MD5

      7af33a08d5be946c4b66c72b51e7c11d

    • SHA1

      f626405e2fded14f21fe331ea1655dacf9393ce9

    • SHA256

      90d35900f54bc98fb53b8e057a24a5b32177ca1b0e52ff48672cfeb221901a17

    • SHA512

      a13e42d9a914763bfc5d86463e7a51b0a6061e5b7a60776ab4fad79ed10469029482a376e123829eeeba9ca2192f103527b3c3dd0cc7dbaa41ae989580605d3f

    • SSDEEP

      3072:DteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzo9qM:rq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks