General

  • Target

    JaffaCakes118_ac511e6694d15544a0a7d135a19927d049204b928f295183400da977d41a0c95

  • Size

    188KB

  • Sample

    241230-x9vrlavpck

  • MD5

    dffe8263229d5fc0749a5e96bb5f285e

  • SHA1

    ec57e038230f3049668951c69166a9620a1b29d0

  • SHA256

    ac511e6694d15544a0a7d135a19927d049204b928f295183400da977d41a0c95

  • SHA512

    f655f00e8590ed4e889b450b0e21a6cac0c72468c0aa1b6846c16c818df982025825633a96e008600618c1683c3c5852247af31915cc08ca0f9972d259ff3f1b

  • SSDEEP

    3072:GteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzy9qM:uq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_ac511e6694d15544a0a7d135a19927d049204b928f295183400da977d41a0c95

    • Size

      188KB

    • MD5

      dffe8263229d5fc0749a5e96bb5f285e

    • SHA1

      ec57e038230f3049668951c69166a9620a1b29d0

    • SHA256

      ac511e6694d15544a0a7d135a19927d049204b928f295183400da977d41a0c95

    • SHA512

      f655f00e8590ed4e889b450b0e21a6cac0c72468c0aa1b6846c16c818df982025825633a96e008600618c1683c3c5852247af31915cc08ca0f9972d259ff3f1b

    • SSDEEP

      3072:GteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzy9qM:uq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks