General

  • Target

    JaffaCakes118_083ae946dabd5444c267e5f8eb4e3a4f3e566920531edd85e9269ec43e478148

  • Size

    188KB

  • Sample

    241230-ebhp9sxkhv

  • MD5

    7ddd3b2e5b45e60aaa7623a4a3e18f1e

  • SHA1

    a1945c22562f999ceada3cd528c4c493950096eb

  • SHA256

    083ae946dabd5444c267e5f8eb4e3a4f3e566920531edd85e9269ec43e478148

  • SHA512

    0130107193ead3625fc4a111b637f6a7ea37de9186904cbc1d567a9ad7502c7ea56a68c58590684452d21a756efc2d1cfa04ad245bfa4dd88269910e72f9cde9

  • SSDEEP

    3072:DteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz09qM:rq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_083ae946dabd5444c267e5f8eb4e3a4f3e566920531edd85e9269ec43e478148

    • Size

      188KB

    • MD5

      7ddd3b2e5b45e60aaa7623a4a3e18f1e

    • SHA1

      a1945c22562f999ceada3cd528c4c493950096eb

    • SHA256

      083ae946dabd5444c267e5f8eb4e3a4f3e566920531edd85e9269ec43e478148

    • SHA512

      0130107193ead3625fc4a111b637f6a7ea37de9186904cbc1d567a9ad7502c7ea56a68c58590684452d21a756efc2d1cfa04ad245bfa4dd88269910e72f9cde9

    • SSDEEP

      3072:DteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz09qM:rq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks