General

  • Target

    JaffaCakes118_cbd72fee7aa3f2bb21d01bfaee3f20cee115b0d4f84873325c284a683ffbb45f

  • Size

    188KB

  • Sample

    241230-d5qgjaxja1

  • MD5

    c853ed88b4750e1e0c41b80075bf5eb1

  • SHA1

    128d389ad50d48fe1f6537b2765ddaea4dd39d39

  • SHA256

    cbd72fee7aa3f2bb21d01bfaee3f20cee115b0d4f84873325c284a683ffbb45f

  • SHA512

    75772b5f4b66e2cedb44e172556f4181fec48af8252f65d2326b07fe5037335ca3d0f26735ea0738f7a767957fd6076dc5dc483f86a172d95932cdc6fce84099

  • SSDEEP

    3072:EteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzG9qM:4q7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_cbd72fee7aa3f2bb21d01bfaee3f20cee115b0d4f84873325c284a683ffbb45f

    • Size

      188KB

    • MD5

      c853ed88b4750e1e0c41b80075bf5eb1

    • SHA1

      128d389ad50d48fe1f6537b2765ddaea4dd39d39

    • SHA256

      cbd72fee7aa3f2bb21d01bfaee3f20cee115b0d4f84873325c284a683ffbb45f

    • SHA512

      75772b5f4b66e2cedb44e172556f4181fec48af8252f65d2326b07fe5037335ca3d0f26735ea0738f7a767957fd6076dc5dc483f86a172d95932cdc6fce84099

    • SSDEEP

      3072:EteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzG9qM:4q7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks