General

  • Target

    JaffaCakes118_8191d5766cec0c57cad4f6652363cfb1f25bf9dafba11820cef4fd2d65dc321b

  • Size

    188KB

  • Sample

    241230-e1g52axrgp

  • MD5

    0db91573b7641883803eb71ee980ef68

  • SHA1

    838c5055766eae75b84a388e532e43a9b093d875

  • SHA256

    8191d5766cec0c57cad4f6652363cfb1f25bf9dafba11820cef4fd2d65dc321b

  • SHA512

    1b7a795113c1ec732ea69eb276f7f9543dbbca26a458a6696995e54cd0c1872307529eff9c29bcdb34d435fda97b94cb1d501ed4d89352c574c4fe1564b8631d

  • SSDEEP

    3072:TteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzU9qM:bq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_8191d5766cec0c57cad4f6652363cfb1f25bf9dafba11820cef4fd2d65dc321b

    • Size

      188KB

    • MD5

      0db91573b7641883803eb71ee980ef68

    • SHA1

      838c5055766eae75b84a388e532e43a9b093d875

    • SHA256

      8191d5766cec0c57cad4f6652363cfb1f25bf9dafba11820cef4fd2d65dc321b

    • SHA512

      1b7a795113c1ec732ea69eb276f7f9543dbbca26a458a6696995e54cd0c1872307529eff9c29bcdb34d435fda97b94cb1d501ed4d89352c574c4fe1564b8631d

    • SSDEEP

      3072:TteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzU9qM:bq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks