General

  • Target

    JaffaCakes118_c71c624f4cf2c74daa0282c64d01458123850c04e854476d04225a0896bc2579

  • Size

    188KB

  • Sample

    241230-3bxq7awndv

  • MD5

    6aa8c32ba5629ea34df6a7f6ef9a4b87

  • SHA1

    31d8683c8a1b2a8374dac9ddc8c467d6fff99a0f

  • SHA256

    c71c624f4cf2c74daa0282c64d01458123850c04e854476d04225a0896bc2579

  • SHA512

    f187de5cc98481f78abd25fa3446b1562f34405335d73817f198d80dee69f1a9c81ad1a8edb959b922a9201e3f2e6b4dcf2dac6b6eb4604f6b259e59bc1e602c

  • SSDEEP

    3072:lteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzq9qM:hq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_c71c624f4cf2c74daa0282c64d01458123850c04e854476d04225a0896bc2579

    • Size

      188KB

    • MD5

      6aa8c32ba5629ea34df6a7f6ef9a4b87

    • SHA1

      31d8683c8a1b2a8374dac9ddc8c467d6fff99a0f

    • SHA256

      c71c624f4cf2c74daa0282c64d01458123850c04e854476d04225a0896bc2579

    • SHA512

      f187de5cc98481f78abd25fa3446b1562f34405335d73817f198d80dee69f1a9c81ad1a8edb959b922a9201e3f2e6b4dcf2dac6b6eb4604f6b259e59bc1e602c

    • SSDEEP

      3072:lteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzq9qM:hq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks