General

  • Target

    JaffaCakes118_ef65a6997df2e5cadeb306c8c1e4131dcf595a65c24be854daedd7de9e89e1ec

  • Size

    188KB

  • Sample

    241230-e7e91sykaw

  • MD5

    63393721b3e2639300c5189f6d33af4e

  • SHA1

    61cc7486518c5649153acc7eef2ddd2868c27947

  • SHA256

    ef65a6997df2e5cadeb306c8c1e4131dcf595a65c24be854daedd7de9e89e1ec

  • SHA512

    2af550813de7c0533c3a9f144c63fe5a11059f0d573d580b269f3ae013f4615dcb55bf39fc2bc38afb56da899ec86dd749742122cc101fda0741e0a53a397a32

  • SSDEEP

    3072:nteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzA9qM:/q7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_ef65a6997df2e5cadeb306c8c1e4131dcf595a65c24be854daedd7de9e89e1ec

    • Size

      188KB

    • MD5

      63393721b3e2639300c5189f6d33af4e

    • SHA1

      61cc7486518c5649153acc7eef2ddd2868c27947

    • SHA256

      ef65a6997df2e5cadeb306c8c1e4131dcf595a65c24be854daedd7de9e89e1ec

    • SHA512

      2af550813de7c0533c3a9f144c63fe5a11059f0d573d580b269f3ae013f4615dcb55bf39fc2bc38afb56da899ec86dd749742122cc101fda0741e0a53a397a32

    • SSDEEP

      3072:nteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzA9qM:/q7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks