General

  • Target

    JaffaCakes118_733f51dd50be8405dfc4c59c08308fe03aa05d0cc5b6cfa68dd9e785212f05a8

  • Size

    188KB

  • Sample

    241230-2y1kxsspgr

  • MD5

    d3ef76998644912647e9dee347743b9e

  • SHA1

    930898302dcdbe266fb3e1cc9a7e54d8a2ef8c7e

  • SHA256

    733f51dd50be8405dfc4c59c08308fe03aa05d0cc5b6cfa68dd9e785212f05a8

  • SHA512

    388ba269d69e90a2997e297564026ccf70015047f8b8701adb4b46a2f713b8f2634c742e9aad5501fd7cf6922fe3881c40f7c52c3869cb07f7636c2aeb443dc9

  • SSDEEP

    3072:jteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz/9qM:Lq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_733f51dd50be8405dfc4c59c08308fe03aa05d0cc5b6cfa68dd9e785212f05a8

    • Size

      188KB

    • MD5

      d3ef76998644912647e9dee347743b9e

    • SHA1

      930898302dcdbe266fb3e1cc9a7e54d8a2ef8c7e

    • SHA256

      733f51dd50be8405dfc4c59c08308fe03aa05d0cc5b6cfa68dd9e785212f05a8

    • SHA512

      388ba269d69e90a2997e297564026ccf70015047f8b8701adb4b46a2f713b8f2634c742e9aad5501fd7cf6922fe3881c40f7c52c3869cb07f7636c2aeb443dc9

    • SSDEEP

      3072:jteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz/9qM:Lq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks