General

  • Target

    JaffaCakes118_7e3b71417ba0d2b3668659848945ac414c872cf9f5cd291211a76a7f4b11be34

  • Size

    188KB

  • Sample

    241230-ew52asxqgp

  • MD5

    9c38acd8904851b212e1027a58d6ae07

  • SHA1

    48ab4dc1488bc5661e7085bff71f3c4a1628a613

  • SHA256

    7e3b71417ba0d2b3668659848945ac414c872cf9f5cd291211a76a7f4b11be34

  • SHA512

    61a0fb6ddde8d6673d78d246db13a1580c9c5cea5d49bb22bfa3c2dc69d21788faa0b3e72f2e253506c14e8424ebfcdc0f9c6a565d37529afa6c6dd2eb5810aa

  • SSDEEP

    3072:WteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz/9qM:eq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_7e3b71417ba0d2b3668659848945ac414c872cf9f5cd291211a76a7f4b11be34

    • Size

      188KB

    • MD5

      9c38acd8904851b212e1027a58d6ae07

    • SHA1

      48ab4dc1488bc5661e7085bff71f3c4a1628a613

    • SHA256

      7e3b71417ba0d2b3668659848945ac414c872cf9f5cd291211a76a7f4b11be34

    • SHA512

      61a0fb6ddde8d6673d78d246db13a1580c9c5cea5d49bb22bfa3c2dc69d21788faa0b3e72f2e253506c14e8424ebfcdc0f9c6a565d37529afa6c6dd2eb5810aa

    • SSDEEP

      3072:WteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz/9qM:eq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks