General

  • Target

    JaffaCakes118_bd5fcdc538e9de21815d939999548cf42e72bb66ae4c481b485bbaeb25a0ff97

  • Size

    188KB

  • Sample

    241230-x1j9haxlfx

  • MD5

    ba358d5f2099f2798899ed8ddf6b7ecb

  • SHA1

    da3b5cbd76a2fe344a4da249153ce64388942144

  • SHA256

    bd5fcdc538e9de21815d939999548cf42e72bb66ae4c481b485bbaeb25a0ff97

  • SHA512

    74cc022ae9796aaad34c97ec8158c250e399a71852755dd83d8bd8aebf1708314954f8a986f0a77cab4da7b6cdc5254839562d551d49e9f594432c3cda84985b

  • SSDEEP

    3072:OteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzo9qM:mq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_bd5fcdc538e9de21815d939999548cf42e72bb66ae4c481b485bbaeb25a0ff97

    • Size

      188KB

    • MD5

      ba358d5f2099f2798899ed8ddf6b7ecb

    • SHA1

      da3b5cbd76a2fe344a4da249153ce64388942144

    • SHA256

      bd5fcdc538e9de21815d939999548cf42e72bb66ae4c481b485bbaeb25a0ff97

    • SHA512

      74cc022ae9796aaad34c97ec8158c250e399a71852755dd83d8bd8aebf1708314954f8a986f0a77cab4da7b6cdc5254839562d551d49e9f594432c3cda84985b

    • SSDEEP

      3072:OteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzo9qM:mq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks