General

  • Target

    JaffaCakes118_682f854abdae2f5169a2bcfca9b88db81bf2a8dc678ab2628185c078517d131c

  • Size

    188KB

  • Sample

    241230-fjpzzsynay

  • MD5

    ff6a5c9f4111a7c506069f9bf242a11f

  • SHA1

    2285c87842459d699839718eaf76cd8285300133

  • SHA256

    682f854abdae2f5169a2bcfca9b88db81bf2a8dc678ab2628185c078517d131c

  • SHA512

    9b13263d746d3596f7101136f92dc7c6fe8b4356e41cb90451129f1e6abc481de2288fe2194e7f0bfdb1d445c5b6ec760764c9de84ccd625c60a6a7e6249cf70

  • SSDEEP

    3072:WteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzq9qM:eq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_682f854abdae2f5169a2bcfca9b88db81bf2a8dc678ab2628185c078517d131c

    • Size

      188KB

    • MD5

      ff6a5c9f4111a7c506069f9bf242a11f

    • SHA1

      2285c87842459d699839718eaf76cd8285300133

    • SHA256

      682f854abdae2f5169a2bcfca9b88db81bf2a8dc678ab2628185c078517d131c

    • SHA512

      9b13263d746d3596f7101136f92dc7c6fe8b4356e41cb90451129f1e6abc481de2288fe2194e7f0bfdb1d445c5b6ec760764c9de84ccd625c60a6a7e6249cf70

    • SSDEEP

      3072:WteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzq9qM:eq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks