General

  • Target

    JaffaCakes118_fc6c66d96f010a9f776754f58d1eb9c5bbbeca66b21d3dd6baa358ae1202dbc7

  • Size

    188KB

  • Sample

    241230-3y3kysxpgz

  • MD5

    1d6fc26afb4f8e8967d7ea0218cc8503

  • SHA1

    fcbffcde00391e1808a7e56c22536f762e876277

  • SHA256

    fc6c66d96f010a9f776754f58d1eb9c5bbbeca66b21d3dd6baa358ae1202dbc7

  • SHA512

    a6971c5557fcec563dc018e6bf182e6447153fc0480957a9ea9bc0168b45e3b98f2220e76021f44fc55d374673ade5c3555c4ebc70227a7cd1caca685055052f

  • SSDEEP

    3072:8teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzI9qM:Aq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_fc6c66d96f010a9f776754f58d1eb9c5bbbeca66b21d3dd6baa358ae1202dbc7

    • Size

      188KB

    • MD5

      1d6fc26afb4f8e8967d7ea0218cc8503

    • SHA1

      fcbffcde00391e1808a7e56c22536f762e876277

    • SHA256

      fc6c66d96f010a9f776754f58d1eb9c5bbbeca66b21d3dd6baa358ae1202dbc7

    • SHA512

      a6971c5557fcec563dc018e6bf182e6447153fc0480957a9ea9bc0168b45e3b98f2220e76021f44fc55d374673ade5c3555c4ebc70227a7cd1caca685055052f

    • SSDEEP

      3072:8teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzI9qM:Aq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks