General

  • Target

    JaffaCakes118_b5acc4976118f8443c0d5d15458a2bb0aab9dbe1cb575ef4911685974744126e

  • Size

    188KB

  • Sample

    241230-v9956stphv

  • MD5

    ddfba49b6171974bff3045b9c33bb5a6

  • SHA1

    3ec40f742e274fa096604d215935d869a057019a

  • SHA256

    b5acc4976118f8443c0d5d15458a2bb0aab9dbe1cb575ef4911685974744126e

  • SHA512

    9631d9e5d32a4b8b490c6e494ccf8a2e091526d5f7fe5cb89490471a029f5e1429355b88541a9a8c0b457e3a50a6d3301cd6b1ab835576624d71e6bc0144d76f

  • SSDEEP

    3072:xteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzT9qM:dq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_b5acc4976118f8443c0d5d15458a2bb0aab9dbe1cb575ef4911685974744126e

    • Size

      188KB

    • MD5

      ddfba49b6171974bff3045b9c33bb5a6

    • SHA1

      3ec40f742e274fa096604d215935d869a057019a

    • SHA256

      b5acc4976118f8443c0d5d15458a2bb0aab9dbe1cb575ef4911685974744126e

    • SHA512

      9631d9e5d32a4b8b490c6e494ccf8a2e091526d5f7fe5cb89490471a029f5e1429355b88541a9a8c0b457e3a50a6d3301cd6b1ab835576624d71e6bc0144d76f

    • SSDEEP

      3072:xteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzT9qM:dq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks