General

  • Target

    JaffaCakes118_cea4d04d27ec5ab6bd5fcb8946bb9115292f84feb3dd14fc2d4ddc34d2e9f4eb

  • Size

    188KB

  • Sample

    241230-2kj11sskdm

  • MD5

    eda5d655ceb1e800915ac87a441a13dc

  • SHA1

    6a6295a54bde06ad7ffaf26975cbd4759c4bb1bb

  • SHA256

    cea4d04d27ec5ab6bd5fcb8946bb9115292f84feb3dd14fc2d4ddc34d2e9f4eb

  • SHA512

    710f936bc0b33cc72168c7808fafca041fe0ffa220a0cf03f7d0e2cdc2ebbb3184f770285cf3b40fc7b70db40b4c28188c15194cef1645f3054e71e881c02767

  • SSDEEP

    3072:uteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzd9qM:Gq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_cea4d04d27ec5ab6bd5fcb8946bb9115292f84feb3dd14fc2d4ddc34d2e9f4eb

    • Size

      188KB

    • MD5

      eda5d655ceb1e800915ac87a441a13dc

    • SHA1

      6a6295a54bde06ad7ffaf26975cbd4759c4bb1bb

    • SHA256

      cea4d04d27ec5ab6bd5fcb8946bb9115292f84feb3dd14fc2d4ddc34d2e9f4eb

    • SHA512

      710f936bc0b33cc72168c7808fafca041fe0ffa220a0cf03f7d0e2cdc2ebbb3184f770285cf3b40fc7b70db40b4c28188c15194cef1645f3054e71e881c02767

    • SSDEEP

      3072:uteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzd9qM:Gq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks