General

  • Target

    JaffaCakes118_582697f95c06b3e6da7cbcec231d507e329c57b9474c6ecbeb765f3ae0bac0a8

  • Size

    188KB

  • Sample

    241230-wr5cmsslfm

  • MD5

    026806657eaf81200a60e614d5be2574

  • SHA1

    2fe09d0a79cd34b95508c0ffc815b5af8f942f3d

  • SHA256

    582697f95c06b3e6da7cbcec231d507e329c57b9474c6ecbeb765f3ae0bac0a8

  • SHA512

    3f7a653bb7aa42e1f0c3c4be6b273c8a96d243aa1808451335b0cd2a1dc4dcfc8a20bf634179707c7c6c37ae45056a4ba6196107f061b7124acb1578617002b8

  • SSDEEP

    3072:MteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzI9qM:wq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_582697f95c06b3e6da7cbcec231d507e329c57b9474c6ecbeb765f3ae0bac0a8

    • Size

      188KB

    • MD5

      026806657eaf81200a60e614d5be2574

    • SHA1

      2fe09d0a79cd34b95508c0ffc815b5af8f942f3d

    • SHA256

      582697f95c06b3e6da7cbcec231d507e329c57b9474c6ecbeb765f3ae0bac0a8

    • SHA512

      3f7a653bb7aa42e1f0c3c4be6b273c8a96d243aa1808451335b0cd2a1dc4dcfc8a20bf634179707c7c6c37ae45056a4ba6196107f061b7124acb1578617002b8

    • SSDEEP

      3072:MteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzI9qM:wq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks