General

  • Target

    JaffaCakes118_2e0694a59c701b4e493427c2056599347fd899008248af87d958b006c922f62c

  • Size

    188KB

  • Sample

    241230-e4yl7ayjdx

  • MD5

    2990a4fbde5ff5b500897f3a416b3873

  • SHA1

    132949282b85a8c22a4a7eadf80c0c4ba7e193c0

  • SHA256

    2e0694a59c701b4e493427c2056599347fd899008248af87d958b006c922f62c

  • SHA512

    d1572e616acea208aa4ee2b7ef4f3a16883b56bf01739e2f488edee12f052eaae4395d9350329e57eaa00d4606df6c6c50c315696e38990c162ed348ef62c0f9

  • SSDEEP

    3072:gteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzY9qM:0q7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_2e0694a59c701b4e493427c2056599347fd899008248af87d958b006c922f62c

    • Size

      188KB

    • MD5

      2990a4fbde5ff5b500897f3a416b3873

    • SHA1

      132949282b85a8c22a4a7eadf80c0c4ba7e193c0

    • SHA256

      2e0694a59c701b4e493427c2056599347fd899008248af87d958b006c922f62c

    • SHA512

      d1572e616acea208aa4ee2b7ef4f3a16883b56bf01739e2f488edee12f052eaae4395d9350329e57eaa00d4606df6c6c50c315696e38990c162ed348ef62c0f9

    • SSDEEP

      3072:gteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzY9qM:0q7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks