General

  • Target

    JaffaCakes118_5910ce8e31bb23c7f20bd56fe5e677d9c3f6174c54f1a44237b755c095c02e61

  • Size

    188KB

  • Sample

    241230-ex212axraq

  • MD5

    fcc981decb7784328aadd9217ab1b74a

  • SHA1

    361dfe7e7c3cb4c231107cf01dea97288d632bc7

  • SHA256

    5910ce8e31bb23c7f20bd56fe5e677d9c3f6174c54f1a44237b755c095c02e61

  • SHA512

    ce5bfc4847daf832eee810e7280aa1d341c68905f50d875fe9d457d4c96410e45c464ec4777f8ca4da851b9e042afda379cc6b68d47a1904b2f5f34228ba05f8

  • SSDEEP

    3072:zgteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzd9qM:z0q7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_5910ce8e31bb23c7f20bd56fe5e677d9c3f6174c54f1a44237b755c095c02e61

    • Size

      188KB

    • MD5

      fcc981decb7784328aadd9217ab1b74a

    • SHA1

      361dfe7e7c3cb4c231107cf01dea97288d632bc7

    • SHA256

      5910ce8e31bb23c7f20bd56fe5e677d9c3f6174c54f1a44237b755c095c02e61

    • SHA512

      ce5bfc4847daf832eee810e7280aa1d341c68905f50d875fe9d457d4c96410e45c464ec4777f8ca4da851b9e042afda379cc6b68d47a1904b2f5f34228ba05f8

    • SSDEEP

      3072:zgteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzd9qM:z0q7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks