General

  • Target

    JaffaCakes118_6106f15956092488ea89496baac74d68ee8094f8cf525f7ebbf8fb4246363020

  • Size

    188KB

  • Sample

    241230-vp29tszrfj

  • MD5

    b3657b2b8a73fdbe7c41c5f72f428739

  • SHA1

    5e6bc35155134db8b791130132d72d603e922399

  • SHA256

    6106f15956092488ea89496baac74d68ee8094f8cf525f7ebbf8fb4246363020

  • SHA512

    589fc93ccf0d1be8a065781ea61fd87e19d12a7476f9c3e187daaff5e80c528dba88e719c1c4fd4b9c7473ac7507a50fed4fc28768daf6f344a76512159e793f

  • SSDEEP

    3072:hA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoso:hzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_6106f15956092488ea89496baac74d68ee8094f8cf525f7ebbf8fb4246363020

    • Size

      188KB

    • MD5

      b3657b2b8a73fdbe7c41c5f72f428739

    • SHA1

      5e6bc35155134db8b791130132d72d603e922399

    • SHA256

      6106f15956092488ea89496baac74d68ee8094f8cf525f7ebbf8fb4246363020

    • SHA512

      589fc93ccf0d1be8a065781ea61fd87e19d12a7476f9c3e187daaff5e80c528dba88e719c1c4fd4b9c7473ac7507a50fed4fc28768daf6f344a76512159e793f

    • SSDEEP

      3072:hA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoso:hzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks