General

  • Target

    JaffaCakes118_468818ad64a475115b64e147fa18f1e7be2a9a3d4ab9ad23a915d264fe711f68

  • Size

    188KB

  • Sample

    241230-w17t5avqbz

  • MD5

    bb0abc05cef9c9d6a206e006c55a8479

  • SHA1

    122289e482f191798c5392cdcbf9c1f346a451bf

  • SHA256

    468818ad64a475115b64e147fa18f1e7be2a9a3d4ab9ad23a915d264fe711f68

  • SHA512

    60babeea53022e3250d13d508a13fb41705a82b4dd3704c9c1871f72545a07568d6b5df4cd1099796948cd6caf76bea0623854fa844a87745218b7aed59846a0

  • SSDEEP

    3072:9teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzq9qM:Jq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_468818ad64a475115b64e147fa18f1e7be2a9a3d4ab9ad23a915d264fe711f68

    • Size

      188KB

    • MD5

      bb0abc05cef9c9d6a206e006c55a8479

    • SHA1

      122289e482f191798c5392cdcbf9c1f346a451bf

    • SHA256

      468818ad64a475115b64e147fa18f1e7be2a9a3d4ab9ad23a915d264fe711f68

    • SHA512

      60babeea53022e3250d13d508a13fb41705a82b4dd3704c9c1871f72545a07568d6b5df4cd1099796948cd6caf76bea0623854fa844a87745218b7aed59846a0

    • SSDEEP

      3072:9teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzq9qM:Jq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks