General

  • Target

    JaffaCakes118_7c42b2aacddd85353cfb363c3cecbd96031e089cb1bab9a545058af69f645f62

  • Size

    184KB

  • Sample

    241230-3js3zawrds

  • MD5

    707574dad6aa87d954ea232d103d814b

  • SHA1

    cd8be928e3a26a3ad023ee6ab7ca03d67eb23c38

  • SHA256

    7c42b2aacddd85353cfb363c3cecbd96031e089cb1bab9a545058af69f645f62

  • SHA512

    794d137a2353cc99f5e1b5d740882e217cea60cee66438fd3b7737a1cd0276ab275f039f24476dfbe3afe624b755bdd029c33f7e4fdd7fe76613198ac3ef3abd

  • SSDEEP

    3072:mgkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdg4dA4l:XPFkq6zOe5ilSanOvd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_7c42b2aacddd85353cfb363c3cecbd96031e089cb1bab9a545058af69f645f62

    • Size

      184KB

    • MD5

      707574dad6aa87d954ea232d103d814b

    • SHA1

      cd8be928e3a26a3ad023ee6ab7ca03d67eb23c38

    • SHA256

      7c42b2aacddd85353cfb363c3cecbd96031e089cb1bab9a545058af69f645f62

    • SHA512

      794d137a2353cc99f5e1b5d740882e217cea60cee66438fd3b7737a1cd0276ab275f039f24476dfbe3afe624b755bdd029c33f7e4fdd7fe76613198ac3ef3abd

    • SSDEEP

      3072:mgkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdg4dA4l:XPFkq6zOe5ilSanOvd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks