General

  • Target

    JaffaCakes118_ca7e27c036f9797287e10b7c74056490e4ea4c2e0a69b6b2292b9377c402643e

  • Size

    188KB

  • Sample

    241230-w33cesvqfy

  • MD5

    784fa885507ccce85b6b342b462a11bd

  • SHA1

    a53f354cffc172b9243572316cf3a97c0921914d

  • SHA256

    ca7e27c036f9797287e10b7c74056490e4ea4c2e0a69b6b2292b9377c402643e

  • SHA512

    dd0971a6b6244205ff53e0965127fa64f6974d17e1b73b2237d753928bfa41705f145d01600d2ad16010e1e05b597e171e0c3cd0e252b9be4980eb2d1ca97bf2

  • SSDEEP

    3072:oteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzI9qM:Mq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_ca7e27c036f9797287e10b7c74056490e4ea4c2e0a69b6b2292b9377c402643e

    • Size

      188KB

    • MD5

      784fa885507ccce85b6b342b462a11bd

    • SHA1

      a53f354cffc172b9243572316cf3a97c0921914d

    • SHA256

      ca7e27c036f9797287e10b7c74056490e4ea4c2e0a69b6b2292b9377c402643e

    • SHA512

      dd0971a6b6244205ff53e0965127fa64f6974d17e1b73b2237d753928bfa41705f145d01600d2ad16010e1e05b597e171e0c3cd0e252b9be4980eb2d1ca97bf2

    • SSDEEP

      3072:oteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzI9qM:Mq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks