General

  • Target

    JaffaCakes118_d78ab02fb120771281efbb8e0d48e7ed22ccc79933526a16d3125a9029252f74

  • Size

    188KB

  • Sample

    241230-x6ax1svmep

  • MD5

    cbda5b10511dbd378c957149b8e92e7a

  • SHA1

    205f655ef3c97ed913fe57cd1f000764917a49ea

  • SHA256

    d78ab02fb120771281efbb8e0d48e7ed22ccc79933526a16d3125a9029252f74

  • SHA512

    5361a253a9f9888b67b4591816a58f8fb2166bb1dd7a4b12b4b211172ba8a109a0ac728567f97a00266dd05ca39a7dea72209919458d41ec787e872977198532

  • SSDEEP

    3072:9teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzb9qM:Jq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_d78ab02fb120771281efbb8e0d48e7ed22ccc79933526a16d3125a9029252f74

    • Size

      188KB

    • MD5

      cbda5b10511dbd378c957149b8e92e7a

    • SHA1

      205f655ef3c97ed913fe57cd1f000764917a49ea

    • SHA256

      d78ab02fb120771281efbb8e0d48e7ed22ccc79933526a16d3125a9029252f74

    • SHA512

      5361a253a9f9888b67b4591816a58f8fb2166bb1dd7a4b12b4b211172ba8a109a0ac728567f97a00266dd05ca39a7dea72209919458d41ec787e872977198532

    • SSDEEP

      3072:9teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzb9qM:Jq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks