General

  • Target

    JaffaCakes118_d4c65b83315c89515931d0b58167c451114ad4ba136cb360a1182b36303167e1

  • Size

    188KB

  • Sample

    241230-exxrbaxqe1

  • MD5

    fc2af756eadc48e369c3654c13a87cb0

  • SHA1

    a67a3b000bbc279a23bf208d59b4759c4dcf835d

  • SHA256

    d4c65b83315c89515931d0b58167c451114ad4ba136cb360a1182b36303167e1

  • SHA512

    a23d4b004e63253c8bada07f51ab240ff463e237bb0ac9f7004cb1e1e53aa5656b99ade9557cf97feaa55d8d79fd922924059833489b00e5fd4f2a5bb6344258

  • SSDEEP

    3072:oteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz29qM:Mq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_d4c65b83315c89515931d0b58167c451114ad4ba136cb360a1182b36303167e1

    • Size

      188KB

    • MD5

      fc2af756eadc48e369c3654c13a87cb0

    • SHA1

      a67a3b000bbc279a23bf208d59b4759c4dcf835d

    • SHA256

      d4c65b83315c89515931d0b58167c451114ad4ba136cb360a1182b36303167e1

    • SHA512

      a23d4b004e63253c8bada07f51ab240ff463e237bb0ac9f7004cb1e1e53aa5656b99ade9557cf97feaa55d8d79fd922924059833489b00e5fd4f2a5bb6344258

    • SSDEEP

      3072:oteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz29qM:Mq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks