General

  • Target

    JaffaCakes118_955453be42936ce76609ae4b12e5b73bc2bc3422e09b9b60a74cc9e050796660

  • Size

    188KB

  • Sample

    241230-g13sva1jaz

  • MD5

    f73933c6134f57b2b7cd945677c814c6

  • SHA1

    f806510fef2c65c4c8fac3bd49587f6280f9b505

  • SHA256

    955453be42936ce76609ae4b12e5b73bc2bc3422e09b9b60a74cc9e050796660

  • SHA512

    8a368c3e6102f18329c41ea6680fa32803d216268c15c32a9366358c1bac219746733337e42b0e2b3071dc077ca4e2dade1c1f5df54a00dbd11b6a5a7172609a

  • SSDEEP

    3072:0teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz/9qM:Iq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_955453be42936ce76609ae4b12e5b73bc2bc3422e09b9b60a74cc9e050796660

    • Size

      188KB

    • MD5

      f73933c6134f57b2b7cd945677c814c6

    • SHA1

      f806510fef2c65c4c8fac3bd49587f6280f9b505

    • SHA256

      955453be42936ce76609ae4b12e5b73bc2bc3422e09b9b60a74cc9e050796660

    • SHA512

      8a368c3e6102f18329c41ea6680fa32803d216268c15c32a9366358c1bac219746733337e42b0e2b3071dc077ca4e2dade1c1f5df54a00dbd11b6a5a7172609a

    • SSDEEP

      3072:0teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz/9qM:Iq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks