General

  • Target

    JaffaCakes118_915c2f41657eb2e4b22cfc2ed01de18352f84cc692ae8a506d643fdc3d587bdc

  • Size

    188KB

  • Sample

    241230-egwjbaxmev

  • MD5

    c53070e1df04ac1e134b846e1acdf00e

  • SHA1

    4ae4e6733aedd7b46ff34f2c518163667733034f

  • SHA256

    915c2f41657eb2e4b22cfc2ed01de18352f84cc692ae8a506d643fdc3d587bdc

  • SHA512

    8353505a5cb20f87165347ab99f4ffeff852ab494fb84627bc4cdfe4175b7cbab074579f1cfffc6bd20d09b11628f629c028b68763edca6dbcd0e97b0918e130

  • SSDEEP

    3072:kteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzM9qM:Yq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_915c2f41657eb2e4b22cfc2ed01de18352f84cc692ae8a506d643fdc3d587bdc

    • Size

      188KB

    • MD5

      c53070e1df04ac1e134b846e1acdf00e

    • SHA1

      4ae4e6733aedd7b46ff34f2c518163667733034f

    • SHA256

      915c2f41657eb2e4b22cfc2ed01de18352f84cc692ae8a506d643fdc3d587bdc

    • SHA512

      8353505a5cb20f87165347ab99f4ffeff852ab494fb84627bc4cdfe4175b7cbab074579f1cfffc6bd20d09b11628f629c028b68763edca6dbcd0e97b0918e130

    • SSDEEP

      3072:kteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzM9qM:Yq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks