General

  • Target

    JaffaCakes118_bf0b231e387bfcd3c74bb78175b65a724d09f90e3c3005c7981146ad202a4fcf

  • Size

    188KB

  • Sample

    241230-3w66csvmar

  • MD5

    408fbde8f1b849e842cb4c98cc43c49d

  • SHA1

    fe75a7efc7d70f633e24903682b530e910f07799

  • SHA256

    bf0b231e387bfcd3c74bb78175b65a724d09f90e3c3005c7981146ad202a4fcf

  • SHA512

    381f422e3d2aba59035fec34a0f9b8e3400b121e777bcdda22d79075f2b9a974007e6d081200846ab14c5671fb7419bf0545a2200e3f9a4b55f30edc3b7720cb

  • SSDEEP

    3072:cteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzW9qM:gq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_bf0b231e387bfcd3c74bb78175b65a724d09f90e3c3005c7981146ad202a4fcf

    • Size

      188KB

    • MD5

      408fbde8f1b849e842cb4c98cc43c49d

    • SHA1

      fe75a7efc7d70f633e24903682b530e910f07799

    • SHA256

      bf0b231e387bfcd3c74bb78175b65a724d09f90e3c3005c7981146ad202a4fcf

    • SHA512

      381f422e3d2aba59035fec34a0f9b8e3400b121e777bcdda22d79075f2b9a974007e6d081200846ab14c5671fb7419bf0545a2200e3f9a4b55f30edc3b7720cb

    • SSDEEP

      3072:cteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzW9qM:gq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks