General

  • Target

    JaffaCakes118_fc98133d3317a898e2628e906a4b969b4167ca25bb7082abd1884d1ccb9feaaf

  • Size

    188KB

  • Sample

    241230-3mwchatqgl

  • MD5

    44bc8a55cbadace702005c91d04feacb

  • SHA1

    931ce054508289689bfa49704861894a233d93a2

  • SHA256

    fc98133d3317a898e2628e906a4b969b4167ca25bb7082abd1884d1ccb9feaaf

  • SHA512

    9d141a121f66ebe46c56856e1a334bf2c68d6bf3bbf0624329991ae07488dbded8f4def05c91979cfddcda22b0b66aa31a61b9001510a04b625d656fbcf2069e

  • SSDEEP

    3072:KteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzN9qM:iq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_fc98133d3317a898e2628e906a4b969b4167ca25bb7082abd1884d1ccb9feaaf

    • Size

      188KB

    • MD5

      44bc8a55cbadace702005c91d04feacb

    • SHA1

      931ce054508289689bfa49704861894a233d93a2

    • SHA256

      fc98133d3317a898e2628e906a4b969b4167ca25bb7082abd1884d1ccb9feaaf

    • SHA512

      9d141a121f66ebe46c56856e1a334bf2c68d6bf3bbf0624329991ae07488dbded8f4def05c91979cfddcda22b0b66aa31a61b9001510a04b625d656fbcf2069e

    • SSDEEP

      3072:KteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzN9qM:iq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks