General

  • Target

    JaffaCakes118_ddfcddce1ca899685e6bd51bc38c28dbd6a8fefdcc3ebed21adb0e29f6901367

  • Size

    188KB

  • Sample

    241230-ftnvnsyqav

  • MD5

    479baba02948f0ede505458c8f395dc9

  • SHA1

    5254f74d9cc713a3827e3925124dc9ef139d7c57

  • SHA256

    ddfcddce1ca899685e6bd51bc38c28dbd6a8fefdcc3ebed21adb0e29f6901367

  • SHA512

    2b6b069b96f24ebd24a4192f7050a3a056841e1e1c6e91acb4c2b62e33c584b37b794f18eb40f2e62065faa9ad9e3cbd3ea30a7a906d2f0fcc7c7fb01c76636c

  • SSDEEP

    3072:SteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzo9qM:aq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_ddfcddce1ca899685e6bd51bc38c28dbd6a8fefdcc3ebed21adb0e29f6901367

    • Size

      188KB

    • MD5

      479baba02948f0ede505458c8f395dc9

    • SHA1

      5254f74d9cc713a3827e3925124dc9ef139d7c57

    • SHA256

      ddfcddce1ca899685e6bd51bc38c28dbd6a8fefdcc3ebed21adb0e29f6901367

    • SHA512

      2b6b069b96f24ebd24a4192f7050a3a056841e1e1c6e91acb4c2b62e33c584b37b794f18eb40f2e62065faa9ad9e3cbd3ea30a7a906d2f0fcc7c7fb01c76636c

    • SSDEEP

      3072:SteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzo9qM:aq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks